A user who has the Administrative mode client access license can access custom entities unexpectedly in Microsoft Dynamics CRM 4.0

A user has the Administrative mode client access license (CAL) in Microsoft Dynamics CRM 4.0. When you log on to Microsoft Dynamics CRM as this user, you can unexpectedly access custom entities. However, you should be unable to view the custom entities.

This problem occurs because the Administrative mode does not examine user permissions for custom entities. The Administrative mode only examines the user permissions for default entities.

This problem is fixed in the latest cumulative update rollup for Microsoft Dynamics CRM 4.0. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base: For more information about Microsoft Business Solutions CRM software hotfix and update package terminology, click the following article number to view the article in the Microsoft Knowledge Base: