Understanding the layers of data security in the Lightning Platform
The Lightning Platform uses a layered data security model that incorporates the concept of applying the principle of least privilege security.
The principle of least privilege is a data security concept that stipulates that users should have the minimum amount of access to data required to carry out their use of the system. As an example, a user record that has been created for managing sales opportunity records should not automatically be provided with full access to marketing campaign records unless it is specifically required.
By using a layered data security model in the Lightning Platform, along with a flexible set of inter-related features that allow you to set the security at each level, data can be secured and only exposed to users that you have determined need it. The following diagram shows the data security levels and the general data security mechanisms that can be applied at an object, record, and...
