2

Good day all! I will try to explain as succinctly as possible.

The permissions/sharing context for the below is as follows

1) Security Controls > Sharing Settings > Default External Access:

Account, Contract & Asset = Private

Contact = Controlled By Parent

Case = Private (cannot be changed if Account = Private)

2) Sharing Set -applied to the Community User Profile in question-:

User:Account = Account:Parent, grant Read/Write to Accounts

User:Account = Case:Account.Parent, grant Read/Write to Cases

3) CRED Profile Settings -applied to the Community User in question-:

Account = Read & Edit

Contacts = Read & Edit

Cases = Read, Create & Edit

Begins

In brief, a Customer Community User using a non-Plus license cannot access Accounts via Lookup when attempting to create a Case, seemingly following both the Sharing Set and the External OWD at the same time.

When the User logs into the Community, there are 3 Tabs: Cases, Accounts and Contacts. The Sharing Set allows the User to see only the Accounts (and the Contacts underneath those Accounts) that have the User's Account as their Parent Account. So if my Community User originates from the 'Google' Account, it can see the 'Google Mail', 'Google Drive' and 'Google Maps' Accounts and Contacts without problem because all of them have their Parent Account set to 'Google'. Clicking on Cases shows similar. Only Cases that belong to 'Google Drive', 'Google Maps' et cetera get listed.

Now, when the User clicks on New Case and attempts to create a Case and append it to an Account, the Account Name lookup field provides NO access to ANY Account. Even Accounts that the User can see and edit on the Accounts tab, spelled out with precision. With Account Name being required on a Case, Case creation is of course impossible.

How is this "Can Access But Can't Access" situation even possible? External OWD are invoked when creating a Case, but Sharing Set is invoked whenever reading or editing records??

To make matters even more interesting, if the User first clicks into an Account that it can see on the Account tab, say 'Google Sheets', so that it becomes listed on the "Recent Accounts" list on the Case's Account Name lookup window, the User is SUDDENLY ALLOWED to create a Case appended to that Account!

What must I do to successfully create a Case with this User via Community with the standard lookup accessibility?

Improve this question

1 Answer 1

Reset to default
2

Customer Community licences use the OWD and another feature on the Community of the Sharing Sets. Salesforce documentation

I have been able to reproduce the problem and have found a work around - if the user creates a case from the Account page using the new button on the related list it allows them to save the case.

enter image description here

enter image description here

While if I try from the Cases Tab and use New then add the account in the lookup I get the problem.

enter image description here

Improve this answer
7
  • Thanks for your reply Dave! Unfortunately, I already have a Sharing Set active for the relevant Profile, providing Read/Write access to Accounts and Cases via User:Account = Account:Parent/Case:Account:Parent mentioned above. My exact issue is that this Sharing Set is supposedly doing it's job right up until I want to create a Case from scratch. I CAN however create a Case directly from an Account record... so either I'm missing something or I've found an access propagation Bug.
    – Sovereignty
    Commented Sep 28, 2016 at 20:24
  • Ok, let me see if I can reproduce in a Dev org.
    – Dave Humm
    Commented Sep 28, 2016 at 20:26
  • Ok, been able to reproduce it now, now have to work out why it won't allow access to the Account Lookup in Case when the Account is visible.
    – Dave Humm
    Commented Sep 28, 2016 at 21:05
  • Thank you for your efforts. I've tried every accessibility, security and permission I can think of!
    – Sovereignty
    Commented Sep 28, 2016 at 21:34
  • It looks like the workround that I suggested is the only way to add the cases which is annoying.
    – Dave Humm
    Commented Sep 28, 2016 at 21:47

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .