Hello! I'm seeking some help with record permissions on a junction object for community users. We have begun to implement security controls for a community user profile. I have two questions I'm hoping you can help with:
- I have a junction object called "Members" that I need to give community members access to… The junction object is associated with Contacts and Accounts. Right now, I’m at the point where I've made it so all Member records are visible/accessible to my test community user. My goal is to configure it so only Member records that have a date field that is not blank, are visible to all community users. I am seeking help on how to set that up.
- Second, I’d like to lock down field level permissions on the Member record, so community users can have read-only access to some fields, and read/write access to just a few of the fields.
If I've posted this in the wrong place, I'd appreciate a nudge in the right direction. Thanks!
@Brett Smith ,
Some insights:
- Junction objects consider the more restrictive permission from one of the master sides;
- To give self-access from SFDC objects with private sharing to Communities, this object must have a relationship with either accounts or contacts.
A sharing set must be created (Setup > All Communities > "Community Name" > Sharing Sets
Obviously, for all cases, the External Sharing Settings must be enabled for the objects.
I think those links can help you as well:
Who sees what in Communities:
https://www.youtube.com/watch?v=2Hp837MaYF8&list=PLnobS_RgN7JaGKYCwK0-cQidXqMFnuxhoSharing sets:
https://trailhead.salesforce.com/en/content/learn/modules/community_rollout_impl/community_rollout_impl_sharinghttps://help.salesforce.com/articleView?id=networks_setting_light_users.htm&type=5External sharing:
https://help.salesforce.com/articleView?id=security_owd_external_setting.htm&r=https%3A%2F%2Fwww.google.com%2F&type=5
