I created a criteria based sharing rule to allow read/write access based on Account Owner and also made sure that the transfer records permission was checked on the profile. According to the article on Transfer Record permission, these actions should be enough:
" For example, to transfer ownership of an account, a user must have “Read” and “Edit” access to the account. Additionally, the new owner of the record must have at least “Read” permission on accounts."
When logging in as a user with this setup, I can change the ownership of all Accounts. For Accounts not included in the sharing rule, I can change ownership but not edit the record details (insufficient privileges, as there is no sharing rule). Can anyone point me in the right direction here? The users should not be able to change ownership of accounts that they cannot edit!
Thanks
11 件の回答
There's not much control over what you can and can't transfer - what you can do is keep the "Transfer Record" permission, then control the rest through validation rules.
Sorta like this:
AND(
ISCHANGED(OwnerId),
OwnerId != 'okToTransferToUser',
$User.ProfileId = 'theSpecialProfile'
)
