salesforce_security_impl_guide

More documents

Recommendations

Info

Securing and Sharing Data Setting the External Organization-Wide Defaults Setting the External Organization-Wide Defaults External Organization-Wide Defaults enable you to set a different default access level for external users. Before you set the external organization-wide defaults, make sure that it is enabled. From Setup, click Security Controls > Sharing Settings, and click the Enable External Sharing Model button. When you first enable external organization-wide defaults, the default internal access and default external access are set to the original default access level. For example, if your organization-wide default for contacts is Private, the default internal access and default external access will be Private as well. To set the external organization-wide default for an object: 1. From Setup, click Security Controls > Sharing Settings 2. Click Edit in the Organization-Wide Defaults area. 3. For each object, select the default access you want to use. You can assign the following access levels. EDITIONS Available in: • Professional • Enterprise • Performance • Unlimited • Developer USER PERMISSIONS To set default sharing access: • “Manage Sharing” Access Level Controlled by Parent Description Users can perform actions (such as view, edit, delete) on a record on the detail side of a master-detail relationship if they can perform the same action on all associated master records. Note: For contacts, Controlled by Parent must be set for both the default internal and external access. Private Public Read Only Public Read/Write Only users who are granted access by ownership, permissions, role hierarchy, manual sharing, or sharing rules can access the records. All users can view all records for the object. All users can view and edit all records for the object. 4. Click Save. Note: The default external access level must be more restrictive or equal to the default internal access level. For example, you can have a custom object with default external access set to Private and default internal access set to Public Read Only. 48
Securing and Sharing Data Disabling External Organization-Wide Defaults Disabling External Organization-Wide Defaults Disabling External Organization-Wide Defaults results in one organization-wide default for each object. Before disabling this feature, set Default External Access and Default Internal Access to the same access level for each object. To disable the external organization-wide defaults: 1. From Setup, click Security Controls > Sharing Settings 2. Click Disable External Sharing Model in the Organization-Wide Defaults area. After disabling the external organization-wide defaults, you’ll see the Default Access setting instead of the Default External Access and Default Internal Access settings in the organization-wide defaults area. If you have User Sharing, the Default External Access settings for the account, contact, case, and opportunity objects remain visible but they are disabled. EDITIONS Available in: • Professional • Enterprise • Performance • Unlimited • Developer USER PERMISSIONS To disable external organization-wide defaults: • “Manage Sharing” Sharing Rules Overview Make automatic exceptions to your organization-wide sharing settings for defined sets of users. Note: Who Sees What: Record Access via Sharing Rules Watch how you can grant access to records using sharing rules. For example, use sharing rules to extend sharing access to users in public groups, roles, or territories. Sharing rules can never be stricter than your organization-wide default settings. They s<strong>impl</strong>y allow greater access for particular users. You can create these types of sharing rules. Type Account sharing rules Account territory sharing rules Campaign sharing rules Based on Account owner or other criteria, including account record types or field values Territory assignment Campaign owner or other criteria, including campaign record types or field values Set Default Sharing Access for Accounts and their associated contracts, assets, opportunities, cases, and optionally, contacts Accounts and their associated cases, contacts, contracts, and opportunities Individual campaign records EDITIONS Account and contact sharing rules are available in: Professional, Enterprise, Performance, Unlimited, and Developer Editions Account territory, case, lead, opportunity, and custom object sharing rules are available in: Enterprise, Performance, Unlimited, and Developer Editions Campaign sharing rules are available in Professional Edition for an additional cost, and Enterprise, Performance, Unlimited, and Developer Editions Only custom object sharing rules are available in Database.com Case sharing rules Case owner or other criteria, including case record types or field values Individual cases and associated accounts 49
Page 1 and 2:
Security Implementation Guide Versi
Page 3 and 4: CONTENTS Chapter 1: Security Overvi
Page 5 and 6: Contents Editing Lead Sharing Rules
Page 7 and 8: CHAPTER 1 Security Overview Salesfo
Page 9 and 10: Security Overview User Security Ove
Page 11 and 12: Security Overview Custom Permission
Page 13 and 14: Security Overview CAPTCHA Security
Page 15 and 16: Security Overview Auditing • Role
Page 17 and 18: Securing and Sharing Data Revoking
Page 19 and 20: Securing and Sharing Data Viewing P
Page 21 and 22: Securing and Sharing Data Cloning P
Page 23 and 24: Securing and Sharing Data App and S
Page 25 and 26: Securing and Sharing Data Working w
Page 27 and 28: Securing and Sharing Data Enable Cu
Page 29 and 30: Securing and Sharing Data Assigning
Page 31 and 32: Securing and Sharing Data Creating
Page 33 and 34: Securing and Sharing Data Editing P
Page 35 and 36: Securing and Sharing Data Searching
Page 37 and 38: Securing and Sharing Data Enable Cu
Page 39 and 40: Securing and Sharing Data Object Pe
Page 41 and 42: Securing and Sharing Data Comparing
Page 43 and 44: Securing and Sharing Data Setting F
Page 45 and 46: Securing and Sharing Data Working w
Page 47 and 48: Securing and Sharing Data Setting L
Page 49 and 50: Securing and Sharing Data Restricti
Page 51 and 52: Securing and Sharing Data Managing
Page 53: Securing and Sharing Data External
Page 67 and 68: Securing and Sharing Data Editing L
Page 69 and 70: Securing and Sharing Data Editing C
Page 71 and 72: Securing and Sharing Data Editing C
Page 73 and 74: Securing and Sharing Data Sharing R
Page 75 and 76: Securing and Sharing Data User Shar
Page 77 and 78: Securing and Sharing Data Sharing U
Page 81 and 82: Securing and Sharing Data Viewing A
Page 83 and 84: Securing and Sharing Data Granting
Page 85 and 86: Configuring Salesforce Security Fea
Page 95 and 96: CHAPTER 4 Enabling Single Sign-On S
Page 97 and 98: Enabling Single Sign-On • Before
Page 99 and 100: Monitoring Your Organization's Secu
Page 105 and 106:
Monitoring Your Organization's Secu
Page 107 and 108:
Security Tips for Apex and Visualfo
Page 109 and 110:
Page 111 and 112:
Page 113 and 114:
INDEX A Access about 10 revoking 11
Page 115 and 116:
Index Profiles (continued) object p
show all

salesforce_security_impl_guide

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?