0

Can anybody please tell if a profile in Salesforce has Create, Read and Edit permissions on an object and for the particular user to whom the profile is assigned is the same as above how to restrict that particular user from editing the record?

2
  • So you are asking 1. How can you tell a profile has permissions on an object. 2. If a user is assigned to that profile then can you restrict that particular user from editing a record on that object type? – Dave Humm Jun 8 '16 at 10:20
  • If a user is assigned to that profile then can you restrict that particular user from editing a record on that object type? – guest610 Jun 8 '16 at 10:22
1

Ok. This is not easily explained. So brace for a long text:

Salesforce has basically two trees of security: Field-Level-Security and Sharing.

Field Level Security (FLS) controls what fields and objects a user can see. That's managed via profiles and permission sets. It means that a user will be able to see the Account tab and the Name Field and Birthday.

Sharing controls which records the user can see. It's managed via OWD (Org Wide Defaults), Roles and the View All and Modify all permissions of the FLS.

--

A user can have access to a object through its profile, but won't be able to see any records if the org sharing rules don't share the record with him.

Keep in mind that salesforce always will respect the least restricted rule applied to a user. So, in any of the cases, there's no way to allow access for everybody and them remove acces for a specific user. What you need to do is restrict access for everybody and then allow access for all user except one.

So, for short. You can give that specific user a different role, and the create a sharing rule on the object that shares all records with the roles of the other users.

This module of Trailhead will give you a very good explanation on how to do that.

2
  • Fernando, that leaves out any consideration of Role Hierarchy and Sharing rules. – Dave Humm Jun 8 '16 at 10:47
  • @DaveHumm oh. you're completely right. I'll just edit my whole question. >.< thanks for pointing that out. – Fernando Gavinho Jun 8 '16 at 12:37

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.