Hi all, I've got a use case where Time entries need to be semi-private. The owners need to see them, the owner's Manager needs to see them, the Project owner needs to see them, but other users in general, other managers, other Project owners, etc. should not see them.
Time is in a Master-Detail relationship with Task, so the only way I know to make them Private is to make Tasks Private, but I'm concerned about how Project owners will get access to the Tasks (and child objects) on their Projects.
Is this a case for Apex sharing?
Edited to add: I sorted this using Flow-created Sharing records and setting Tasks to Private.
Hi Kim,
Thanks for reaching out about this. I did some testing to confirm the expected behavior in my Org, and what I found was with OWD set to Private for TaskRay Project, TaskRay Tasks, and the Project configured as Private, that as long as a User is on the Project Team they will have visibility into all of the Tasks, and therefore all of the Time Entries, on the Project. With that said, I was able to create a Restriction Rule to test being able to hide TaskRay Time Records to only see Records Owned by a the Running User for Users of a specific Role: https://share.taskray.com/bLuvrq0r
Restrictions Rules may be a good way to remove access to TaskRay Time entries even with our Sharing of TaskRay Records in place.
