Contents
How does create privilege control access to records?
The user who creates a record has all rights on that record, unless his or her other privileges forbid a specific right. The Create privilege controls whether you can create a record. If you have the Create privilege with Local, Deep, or Global access, you can create records for other users.
How to control access to the same record?
Use GrantAccessRequest, ModifyAccessRequest, and RevokeAccessRequest for sharing. A user might have access to the same record in more than one context. For example, a user might share a record directly with specific access rights, and he or she might also be on a team in which the same record is shared with different access rights.
Can a user create a record for another user?
If you have the Create privilege with Local, Deep, or Global access, you can create records for other users. If you have Create and Read privileges with Basic access, you can create records for yourself.
How to disable automatic access to Records unit?
To disable automatic access using your hierarchies, deselect Grant Access Using Hierarchies for any custom object that does not have a default access of Controlled by Parent. By default, a role hierarchy automatically grants access to records for users above the record owner in the hierarchy.
How are the sharing properties of a record maintained?
Sharing is maintained on individual records. A record inherits the sharing properties from its parent and also maintains its own sharing properties. Therefore, a record can have two sets of sharing properties—one that it has on its own and one that it inherits from its parent.
How to restrict access to a custom object?
You can set Org-Wide Default access as ‘ Private ‘ for the object. Also, if it is custom object and you can also restrict record visibilty by Role Hierarchy. Uncheck the ‘ Grant Access Using Hierarchies ‘ option to restrict the access by Role Hierarchy.
Can a record be visible in an Org?
You should be able to allow records to be ‘visible’ in the org on a record-by-record basis, or so someone can send you a link, etc. BUT – you should not be able to view the Queue or Accept ownership of something owned by a Queue unless you are a Queue member.