Exploring org-wide sharing
In the previous sections, we learned how to configure user permissions so that they can be configured to access objects and fields, using OLS and FLS security options.
In this section, we'll be presenting a more advanced option that works at the record level and that lets users see only a subset of the records in the database.
This means that, even if a user has access to the Account object and all related fields, a proper sharing setting can let them access only the accounts that they have created or only the accounts based on European countries, for example.
To define sharing, you generally will set up org-wide sharing (telling Salesforce whether Salesforce object records should or should not be seen by anyone), and if you choose to restrict general access, you can open up access to a class of records or users using sharing rules. In this scenario, org-wide sharing defines the strictest access possible to an object's record.
To configure...
