Record ownership and data security
To balance the flexibility for collaboration and the need for data security, Salesforce includes multiple features to restrict access to data. Many of these features were discussed in Chapter 10, An Overview of Sharing and Visibility, but we will summarize a few key features below:
- Organization-wide defaults: When you set an object’s organization-wide default to Private, only the users that own records belonging to that object have access. This can be extended using the various sharing options, profile, and role settings.
- You can configure custom objects to prevent users from automatically inheriting access to them through the role hierarchy.
- You can prevent users from deleting records through profile settings. This may also include record owners.
All of the Salesforce Platform sharing capabilities are supported by three components of the ownership-based sharing architecture:
- An Owner field for all...
