Security issue - users able to log activity against contact they can't edit

I have our orgs sharing rules set up so that Accounts are read only and contacts and opportunities are clearly controlled by the parent. However, I am finding that users are able to log activities against contacts that they should only have read access to, because someone else is the owner. This is not hte behavior I expected.

Does anyone know why this is happening, and what can be done to avoid it? Thank you!

4 réponses

Uma Sankar
2 juil. 2012, 20:30
According to the documentation..you can create a task/event if you:

Have the “Edit Tasks” and “Edit Events” permissions

AND

Have at least read access to a record, if associating the activity with another record

https://cs3.salesforce.com/help/doc/user_ed.jsp?section=help&target=security_sharing_rule_considerations.htm&loc=help&hash=topic-title

Actually this is new info for me..

Ajouter un commentaire

Rédiger une réponse...

0/9000

Security issue - users able to log activity against contact they can't edit

Sales And Marketing

Formation associée

Aide supplémentaire