Record Access (Sharing)

I am trying to create a restriction role on the Event Object with a Record Criteria based on Current User. The "Current User" type does not show up in the picklist, though (it does show up in the User Criteria): 

 This is our first restriction rule, so not sure if it's a setup issue. What could the problem?  

On the help site, there are examples that include the Current User type also in the Record Criteria: 

Thanks and any comments are appreciated! 

Hello Trailblazers!  As we go GA in Winter ‘22, we want to hear your feedback. 

Standard objects may have unique behaviors that we need to ensure are working with Restriction Rules. I have created a set of ideas based on feedback shared in the trailblazer community for standard objects; this way, the object owners can see and respond to your feedback.  Please follow these links to upvote and and comment.

• Account
• Contact
• Case
• Opportunity
• Product2
• Asset
• EmailMessage
• Lead
• External Objects (those using OData 2 & 4 is available since Summer '22)

 We are also interested in what areas you’d like to see additional investment in and what use cases this will unlock for you. Where should we invest in Restriction Rules such that the user or record criteria supports:

• AND operator
• OR operator
• IN operator (do you usually think of this as CONTAINs?)
• cross object lookup aka spanning fields (today we support a single level for record criteria)
• picklists (delivered as part of Spring '22 & Summer '22)
• formula (thank you Benjamin Bratcher for creating this idea)

========

(original post tweaked) On Sept 10, from 11:15am -12:30pm PDT, we'll be answering your questions live during the Winter '22 RRL Admin Preview!  We’ll cover the latest enhancements for Flow, Dynamic Interactions, Security Center, restriction rules, + more!  Register here #AwesomeAdmins #AwesomeAdmins #AwesomeAdmins #AwesomeAdmins#AwesomeAdmins → https://sforce.co/2Vokqte

https://www.salesforce.com/form/event/release-readiness-winter-22/

I have the following objects:

• X__c (Master-Detail )
• Y__c (Master-Detail )
• XY__c (Junction object between X and Y)
• Additionally, I have another object that stores Zone__c and Region__c.
• On the User object, I also have Zone__c and Region__c fields.
• On the Y__c object, I also store Zone__c and Region__c values, but X__c does not have Zone or Region fields.

My role hierarchy is designed as follows:

• Zone level → Branch Manager (e.g., Central, Northern, Southern, Eastern)
• Region level → 4 states grouped under each zone

The challenge is: 

 👉 I need to share

X__c records with users based on their Zone and Region, but since X__c has no direct Zone/Region field

, I’m not sure how best to set this up. 

1. What are the best practices to implement record sharing for this scenario?
2. Should I denormalize data (e.g., copy Zone/Region from Y__c to X__c via automation) or rely on junction object relationships for sharing?
3. Is Apex Sharing a better option here compared to OWD + Sharing Rules?
4. How do I align this with the role hierarchy for secure but efficient access?