3

can you prevent users from seeing different record types? I want to lock down users from being able to view different record types but it seems that are able to do it in a report would i be able to lock that down?

2 Answers 2

5

I'm afraid you'll have to rethink the sharing model. There are several levels of granting access but each of them widens the permissions, you never can use sharing rules etc to revoke something.

So you'd have to start with Organization Wide Defaults = private (and perhaps also "grant access using hierarchies not selected). And then indeed - you could use sharing rules ("criteria based sharing rules" to be precise) to grant access based on record types.

2

Users can view records of all record types so as long as they have read access to the object and sharing (at least read) access to the record.

The explicit record type settings on the profile control which RecordTypes can the user creates records for, if they have write access on the object.

What you could do is assign a very minimal and locked down page layout for the record types you want to protect, so the users can see next to nothing.

1
  • But Elliot's concern is that they're able to bypass the limited page layout with reporting anyway ;) So my guess is he has already tried it.
    – eyescream
    Commented Nov 16, 2012 at 13:19

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .