I don't want to give the "Modify All Data" permision to non-admin users. If I gave a user the "API Enabled" permission, would he/she be able to change ownership of files via the Data Loader, even if he/she is not the file owner or an admin? Would "API Enabled" trump or respect security settings? I am reading the following here (https://developer.salesforce.com/docs/atlas.en-us.api.meta/api/sforce_api_concepts_security.htm): "All API calls respect the sharing model," which to me sounds like the user wouldn't be able to change file ownership, but I am not 100% certain.
Does anyone know for sure/tried this and knows from expereience?
Thank you so very much in advance!
7 respuestas
That's correct - there is no such permission as "Transfer Files" or "Transfer Content".and they don't use the traditional sharing model.
Have you tried logging in to Data Loader as one of your users by any chance ?
I just logged in as a standard user, and he wasn't able to do anything at all with Files.
I tried an update on a Content record where I was changing the record owner and I also tried to delete a Content record...both resulted in the below error message:
insufficient rights on object id
Then I gave him the Manage Content Permissions and Manage Salesforce CRM Content permissions, and tried to change the owner of the record using Data Loader and he got this message:
You do not have permission to change the owner of this document
When he tried to run a Delete on it, he got the same "insufficient rights" error as before
It wasn't until I gave him the Modify All Data permission (as a test) that he was able to do anything with Content - and at that point, he could both update and delete.
