Постоянный запрос авторизации

[Tarasov E]

Пожалуйста

crmForm.all.new_comment.style.weight="230px";
crmForm.all.new_startparse.style.height="90px";
crmForm.all.new_endparse.style.height="90px";
var url="http://vms2:5555/ISV/pages/scaner/history.aspx?"+"&Param1="+crmForm.all.new_history.value; 
crmForm.all.IFRAME_result.src=url;

//Если у пользователя есть роль Системный администратор, то скрываем поле xxx вместе с отображаемой подписью
if(UserHasRole("Системный администратор"))
{

}
else
{
crmForm.all.new_url.Disabled = true;
crmForm.all.new_startparse.Disabled = true;
crmForm.all.new_endparse.Disabled = true;
crmForm.all.new_post.Disabled = true;
crmForm.all.new_enc.Disabled = true;
crmForm.all.new_purpose.Disabled = true;
crmForm.all.new_replace.Disabled = true;
crmForm.all.new_paste.Disabled = true;
}

//Проверяем, есть ли у пользователя запрашиваемая роль
function UserHasRole(roleName) {
    // получаем текущие роли пользователя
	var oXml = GetCurrentUserRoles();
	if(oXml != null) {
		var roles = oXml.selectNodes("//BusinessEntity/q1:name");
		if(roles != null) {
			for( i = 0; i < roles.length; i++) {
				if(roles[i].text == roleName) {
                    // возвращаем true если у пользователя есть эта роль
					return true;
				}
			}
		}
	}
    // в противном случаи возвращаем false
	return false;
}

//Выцепляем все роли пользователя
function GetCurrentUserRoles() {
	var xml = "" +
	"<?xml version=\"1.0\" encoding=\"utf-8\"?>" +
	"<soap:Envelope xmlns:soap=\"http://schemas.xmlsoap.org/soap/envelope/\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\">" +
	GenerateAuthenticationHeader() +
	"<soap:Body>" +
	" <RetrieveMultiple xmlns=\"http://schemas.microsoft.com/crm/2007/WebServices\">" +
	" <query xmlns:q1=\"http://schemas.microsoft.com/crm/2006/Query\" xsi:type=\"q1:QueryExpression\">" +
	" <q1:EntityName>role</q1:EntityName>" +
	" <q1:ColumnSet xsi:type=\"q1:ColumnSet\">" +
	" <q1:Attributes>" +
	" <q1:Attribute>name</q1:Attribute>" +
	" </q1:Attributes>" +
	" </q1:ColumnSet>" +
	" <q1:Distinct>false</q1:Distinct>" +
	" <q1:LinkEntities>" +
	" <q1:LinkEntity>" +
	" <q1:LinkFromAttributeName>roleid</q1:LinkFromAttributeName>" +
	" <q1:LinkFromEntityName>role</q1:LinkFromEntityName>" +
	" <q1:LinkToEntityName>systemuserroles</q1:LinkToEntityName>" +
	" <q1:LinkToAttributeName>roleid</q1:LinkToAttributeName>" +
	" <q1:JoinOperator>Inner</q1:JoinOperator>" +
	" <q1:LinkEntities>" +
	" <q1:LinkEntity>" +
	" <q1:LinkFromAttributeName>systemuserid</q1:LinkFromAttributeName>" +
	" <q1:LinkFromEntityName>systemuserroles</q1:LinkFromEntityName>" +
	" <q1:LinkToEntityName>systemuser</q1:LinkToEntityName>" +
	" <q1:LinkToAttributeName>systemuserid</q1:LinkToAttributeName>" +
	" <q1:JoinOperator>Inner</q1:JoinOperator>" +
	" <q1:LinkCriteria>" +
	" <q1:FilterOperator>And</q1:FilterOperator>" +
	" <q1:Conditions>" +
	" <q1:Condition>" +
	" <q1:AttributeName>systemuserid</q1:AttributeName>" +
	" <q1:Operator>EqualUserId</q1:Operator>" +
	" </q1:Condition>" +
	" </q1:Conditions>" +
	" </q1:LinkCriteria>" +
	" </q1:LinkEntity>" +
	" </q1:LinkEntities>" +
	" </q1:LinkEntity>" +
	" </q1:LinkEntities>" +
	" </query>" +
	" </RetrieveMultiple>" +
	" </soap:Body>" +
	"</soap:Envelope>" +
	"";

	var xmlHttpRequest = new ActiveXObject("Msxml2.XMLHTTP");

	xmlHttpRequest.Open("POST", "/mscrmservices/2007/CrmService.asmx", false);
	xmlHttpRequest.setRequestHeader("SOAPAction"," http://schemas.microsoft.com/crm/2007/WebServices/RetrieveMultiple");
	xmlHttpRequest.setRequestHeader("Content-Type", "text/xml; charset=utf-8");
	xmlHttpRequest.setRequestHeader("Content-Length", xml.length);
	xmlHttpRequest.send(xml);

	var resultXml = xmlHttpRequest.responseXML;
	return(resultXml);
}
Clone = function() {

	var cloneUrl  = location.pathname + "?";
	cloneUrl += "_CreateFromType=" + crmForm.ObjectTypeCode;
	cloneUrl += "&_CreateFromId=" + crmForm.ObjectId;
    if (crmForm.ObjectTypeCode > 9999)
    	cloneUrl += "&etc=" + crmForm.ObjectTypeCode;
    cloneUrl += "#";

	var cloneFeatures = 'toolbars=0,status=1,width=' + document.body.offsetWidth + 'height=' + document.body.offsetHeight;   

	window.open(cloneUrl,'',cloneFeatures);
}

Думаете из-за проверки роли пользователя такая ерунда?