4 个回答
Hi Omar, The short answer is no. You don't block access to certain recordsd for certain users. The way it works is that you set your global default permissions for each object (org wide defaults OWD) and then you open access up to certain types of records to certain types of users using various mechanisms such as:
- Profile object permissions
- The role heirarchy
- Owner based sharing rules
- Criteria based sharing rules
- Account / Opportunity teams
- Manual sharing
- Apex sharing
As you can see the salesforce data sharing model is multi-layered so there are a number of different topics you should consider when setting up your orgs security.A good place to start would be the help page About Organization-Wide Sharing Defaults (
http://help.salesforce.com/apex/HTViewHelpDoc?id=security_sharing_owd_about.htm&language=en_US)
I hope that helps.
Thanks
Damie
