We are using an appExchange product in our solution that requires us to provide 'Modify All' access to Contacts for profiles that would be using the product. Our security model needs us to restrict one of these profiles from modifying contacts that they do not own. Is there any workaround where we can restrict edits to records not own by the user of a profile which has 'Modify All' access to the object?

1 Answer 1


Simply, you need to use validation rule for this use case.

Fire your validation error when following rule is true. Mention other suitable conditions like profile name and NOT(ISNEW())

 (OwnerId <>  $User.Id) && NOT(ISNEW() && $Profile.Name='yourProfileName')
  • And add the profile check to the rule since only applicable to one profile per OP
    – Eric
    Commented Jun 2, 2017 at 5:15
  • Thanks @Santanu Boral this worked for me after tweaking the condition a little bit to- (OwnerId <> $User.Id) && NOT(ISNEW()) && ($Profile.Name='yourProfileName') ..
    – Anisa
    Commented Jun 2, 2017 at 6:08

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .