Questions tagged [owd]

Organization-wide Defaults (OWD)

Filter by
Sorted by
Tagged with
1 vote
0 answers
20 views

Sharing Rules on Activities [duplicate]

OWD as follows A user in the role of 'Customer Support Agent' should be able to view Activities related to Accounts and Contacts they do not own. Since Sharing Rule on Activities is not possible. ...
0 votes
0 answers
36 views

Share Internal User record with Partner users in Experience Cloud

I have the external sharing on User record set as Private. So, when I query the internal user record where Title field on User record is set as 'Lead' it returns empty results. I tried creating a ...
  • 4,591
1 vote
1 answer
42 views

Why am I able to delete a record of the detail object?

There are two custom objects in a Master Detail Relationship: Employees (Detail object) Projects (Master object) I built a custom profile that consists of user1, and the object level permissions for ...
0 votes
1 answer
116 views

Creating Community User, You do not have the level of access necessary to perform the operation you requested

I am having a system administrator profile. I have enabled the Community Site and Created the new Profile CMS Portal under Customer Community User Licence. From the contact object i am Enable Customer ...
0 votes
0 answers
47 views

Restricting visibility to Contact records based on a field

I'm trying to lock down visibility to certain contacts in SFDC. We have a field on Contact that is populated by a Flow and it is one value that we care about. The field is called 'Record Type Account'....
  • 139
0 votes
0 answers
86 views

Allow only 1 profile to Merge Accounts

Use Case: Only users from a profile 'CSX' should have the ability to Merge Accounts. No matter who owns the Acount, when Accounts need to be merged only this profile can Merge the records. Security ...
1 vote
0 answers
46 views

Get sharing settings (OWD) options in APEX

I develop application, part of which is implementing of OWD settings edition. First phase is to do it as it is on standard Sharing settings setup. As there are multiple options for standard object - ...
0 votes
0 answers
107 views

Unable to deploy OWD change on Streaming Channel object

I'm trying to make the OWD on the StreamingChannel object as private. However, when trying to deploy the StreamingChannel object, I get the following error message: "Custom Object Definition ID: ...
  • 13
0 votes
1 answer
209 views

Sharing rule does not expand permissions for specified group members

I have a custom object called Banner that I'd like to allow portal users to view and portal administrators to create/edit all records. Currently the admin can create, edit, delete their own records, ...
  • 31
0 votes
1 answer
727 views

Delete records of other users with OWD as Public Read/Write

I have a custom object "Position" and the OWD setting is set as Public Read/Write. On the Custom profile I have given Read, Create, Edit & Delete permission to the Position Object When I ...
  • 103
0 votes
1 answer
174 views

Role Hierarchy, Sharing Settings & Team Member puzzling issue

I have this Role Hierarchy (assume there is only 1 user in each role listed below) How I've set up all the accesses: OWD: Account and Contract -> Private for both Default Internal and External ...
  • 1,095
0 votes
1 answer
57 views

INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY and Criteria-Based Sharing Rules

See also this well-trod question/answer Given OWD of Private on Lead afterInsert trigger on Lead inserts (via Apex) a child Task pointing at the parent Lead via WhoId Criteria-based sharing rules ...
  • 63.8k
0 votes
1 answer
84 views

Organisation Wide Default and Sharing Rule and Apex Sharing

If organisation wide default is read write and record is shared in read mode by sharing rule or by apex then which will be the final access to the user??
0 votes
1 answer
203 views

Remove access to Account Records having record type "Partner", for a particular role

I have been struggling to understand how to implement the following requirement, would appreciate any useful tips. How will you remove R/W access to Account records having record type "Partner&...
0 votes
1 answer
30 views

Need help with Data Security requirement

Below is my requirement: There are multiple programs within the org and I have this requirement. Part 1: Profile A should only be able to see Program A data (Accounts, Customers, etc..) Part 2: ...
0 votes
0 answers
81 views

I wanted to know that under what circumstances is the sharing button enabled on the detail view for a record?

Now, I have a custom object for which I have the OWD set as private, then I am able to see the sharing button on the detail page of the record, but even if I set it to public read/write, I can still ...
0 votes
3 answers
928 views

OWD override the Permission set?

I have a object with setting public read only but with permission set can i override it? Like if i want to delete or edit other records if user has a permission set assigned?
user avatar
0 votes
1 answer
95 views

I want community users to see only contacts related to the Account , but i want the users to see all the term records (irrespective of the Account)

Scenario: There are three objects Account, Contact and Term(this object has master detail relationship with Account and is also a part of a managed package) Account OWD:Private Contact OWD: Controlled ...
0 votes
2 answers
569 views

Deletion of records who created it

For example am the owner of the record then only i should be able to delete the record, And i should not be able to delete records created by others.I cant give ModifyAll permission to that profile as ...
user avatar
1 vote
1 answer
151 views

Record Access Calculation when OWD is public read/write and Grant Access Using Hierarchies selected

This could be an academic question, but, what happens when the OWD of a custom object is Public Read/Write and the 'Grant Access Using Hierarchies' is selected? Does it means that everytime we change ...
1 vote
2 answers
2k views

Specific user cannot see other users in Standard User Report

Scenario : A User Adam of 'Regional' Role creates a User report for the User Bob of 'Country Head' Role (Role Hierarchy is 'Country Head' reports to 'Regional'). Report has the filter as Login Date ...
  • 1,095
1 vote
2 answers
911 views

Insufficient Privileges Error when clicking on EmailMessage record

Where Can I set the permissions for this object? I can see the record as an admin, because of Modify All permission. As a sales user, I can see only the records which were created by me. How to extend ...
0 votes
1 answer
966 views

Restrict record visibility based on a field (even for the record owner)

I have a requirement to hide any records of an object, when the 'Status' field is set as 'Closed'. I want to hide these records from a user, even if he is the owner of the record. Is there any idea ...
0 votes
2 answers
488 views

How to Bypass Grant Access using Role Hierarchy for Standard Object

Is there any way to bypass Grant Access using Role hierarchy for standard Objects. I'm Using Apex Sharing for Sharing the Record.
0 votes
1 answer
124 views

Allow search on Account without Read access (Private OWD)

So I've come across a requirement which require us to set the Account OWD to private, but users still need to be able to search for an account so that they know if it exists in the org or not. Kind of ...
  • 71
1 vote
1 answer
1k views

Users able to edit records not owned by them inspite of OWD Setting Public Read Only

The OWD setting on Opportunity is Public Read Only Permission on Opportunity for User Profile is: Create, Edit, Delete, Read, View All. No permission to Modify All Sharing Rules are not defined for ...
0 votes
1 answer
283 views

Grant access using hierarchies not working

Facing an absurd issue. USER A is aligned with role A. USER B is aligned with role B. Role A is at higher level than Role B. OWD settings for a custom object Test_c is Private. Through manual ...
0 votes
1 answer
551 views

OWD Private not working

I've restricted access for Account and Order records in the system. Only owners should be able to access the data. When I login as some user A(sys admin/ non sys admin), The account and order list ...
  • 2,146
2 votes
1 answer
4k views

What does "Use" mean in Organization-Wide Defaults of Pricebook object?

I was looking for OWD Settings for Product2 object and found that OWD for Product2 is managed by Pricebook object. On checking the defaults in Pricebook object, it is set at Use unlike others which ...
0 votes
1 answer
168 views

CRUD & FLS - Trailhead

I'm passing the Data Leak Prevention module and have faced some misunderstanding here in this unit Controller: public with sharing class CRUD_FLS_Challenge { public List<Treasures__c> ...
  • 697
-2 votes
1 answer
635 views

Standard Object Permissions for Read-only profile

For what this standard profile has for example for Account standard object access to read (without any other permissions) records? What kind of records this profile is able to read? I'm investigating ...
  • 697
0 votes
2 answers
2k views

prevent deletion of records even the user profile having Modify All permission

I want to prevent users from deleting the records even if they have modify all data permission. Please suggest.
  • 1
0 votes
0 answers
345 views

is Sharing rules get recalcuated on deployment of Same OWD

I have one repository where i have OWD for account,contact and some other custom objects which is same as in salesforce org. Is Sharing rules getting recalculated if I deployed the same OWD. Please ...
  • 1
1 vote
1 answer
2k views

ui.services.connection.api.PartnerConnectionException: INVALID_FIELD: salesforce

I gave permissions on Campaign to some profile - Read, Create, Edit And on OWD I gave to the Campaign member - Controlled by Campaign. When I entered Campaigns from a user in that profile- I see ...
  • 963
0 votes
1 answer
682 views

Record detail view is not visible for partner users

Working on custom object let's call it as 'channel plan' owd is private. - Displaying few channel plan records based on code. Apex class is without sharing. In community,I can able to view ...
  • 3
0 votes
0 answers
26 views

Account sharing Rule

My requirement is "Log in as any user with a profile other than System Administrator. Ensure the user has access to view all Account record types but is only able to create and edit those with the ...
0 votes
1 answer
415 views

OWD Profiles and role hierarchy

Thanks Prakash. I have another related question please The OWD setting on a object ABC is set to Public REad Only and the Profile level access to my Manager on object ABC is set to Read . Grant ...
0 votes
0 answers
225 views

View report records by queues not working

I have a custom report (Sales Orders with Work orders) but it doesn't filter out by queues. Both objects are on PRIVATE in the OWD and I have set the filter to the one in the print screen Any user ...
  • 335
2 votes
0 answers
133 views

ant won't set sharing OWD on new objects?

I am using ant migration tool to deploy a new custom object to a target. This object has external sharing OWD set to Private. I've verified this in the object metadata. <externalSharingModel>...
  • 6,514
0 votes
1 answer
637 views

Able To Delete Sobject Even if No permission for User

I have an Invoice Object inovice1, A profile sales1.Profile sales1 have no crud permission for invoice1 object not even read. Also OWD for Invoice object is set to private.Still I am able to insert,...
0 votes
1 answer
200 views

"Allow Delete Only If" Permission

Disclaimer: Permission settings newbie here. In my org, there are 3 departments. I've set up a role hierarchy with three branches where each head of department (HOD) is at the top. Underneath is ...
0 votes
2 answers
2k views

Case Creator unable to view case once case ownership changes to queue

This seems basic but I cannot figure out how to do this. Here are my requirements: When a User submits a developer issue case, the case gets assigned to the developer issue queue (Complete. done by ...
  • 91
1 vote
0 answers
78 views

Getting AccountTeamMember with Edit on OpportunityAccessLevel when OWD are Read Only

We're using apex to dynamically add/remove users to Account teams which seems to be working fine but we're noticing that users added are only getting Read access to Opportunities after being added to ...
0 votes
1 answer
1k views

Implicit sharing on custom objects relationship

For a parent and child in a lookup relationship with a Grandparent of the parent. If a OWD is set to private for all objects then what will happen if- 1) CRUD access is not provided to any two of ...
  • 67
2 votes
1 answer
1k views

what happens to the records if record owner is inactivated or deleted from the org

I have private sharing mode (OWD) for a custom object. Thus, only record owners have access to their respective records. Now one of the owner (user) needs to be deactivated. how to handle the records ...
1 vote
1 answer
872 views

Customer Community licence is not allowing to give view all access on account

Organization-wide default is Public read/write. I want a community user to access all account from community. I tried to give view all access through permission set but getting an error - . The ...
0 votes
0 answers
80 views

Why Customer Community Login user doesn't see one Salesforce user but sees another?

BACKGROUND We have a trigger on the FeedItem (Chatter post) which uses a helper class: public without sharing class FeedItemTriggerHelper { public static void handleAfterInsert(List<FeedItem>...
  • 4,777
9 votes
1 answer
2k views

Can OWD be imported/exported as metadata?

I'm currently trying to create a scratch org which reflects our ludicrously complicated production org which contains hundreds of Roles. Upon deploying most of these, I get errors like: Error src/...
0 votes
1 answer
228 views

Hide user records from certain groups of users

I have a requirement in my org as below I have a set of users who can access only limited set of data(say 3 objects data). In their profile I have removed cred permisions to other objects except 3 ...
  • 1
3 votes
1 answer
77 views

Security setting issue in salesforce-OWD

I have a requirement on admin part. I have a profile called vetprofile where the users of the profile needs to see only specific records of an object which have assigned to field value is equal to ...