salesforce_security_impl_guide

Securing and Sharing Data
Recalculating Sharing Rules
• You can easily convert sharing rules that include Roles, Internal and Portal Subordinates to include Roles and Internal Subordinates
instead by using the Convert Portal User Access wizard. Furthermore, you can use this wizard to convert any publicly accessible
report, dashboard, and document folders to folders that are accessible by all users except for portal users.
Recalculating Sharing Rules
When you make changes to groups, roles, and territories, sharing rules are usually automatically
reevaluated to add or remove access as necessary. Changes could include adding or removing
individual users from a group, role, or territory, changing which role a particular role reports to,
changing which territory a particular territory is subordinate to, or adding or removing a group from
within another group.
Note: You don’t have to recalculate each time you edit or create a new sharing rule. The
Recalculate buttons on the Sharing Rules related lists should only be used if sharing rule
updates have failed or are not working as expected. The administrator will receive a notification
email if sharing rule updates have failed.
To manually recalculate an object’s sharing rules:
1. From Setup, click Security Controls > Sharing Settings.
2. In the Sharing Rules related list for the object you want, click Recalculate.
3. If you want to monitor the progress of a recalculation, from Setup, click Monitoring >
Background Jobs or Jobs > Background Jobs.
Note: The Recalculate button is disabled when group membership or sharing rule
calculations are deferred.
When sharing is recalculated, Salesforce also runs all Apex sharing recalculations.
Automatic sharing rule calculation is enabled by default. You can defer sharing rule calculation by
suspending and resuming at your discretion.
EDITIONS
Account and contact sharing
rules are available in:
Professional, Enterprise,
Performance, Unlimited,
and Developer Editions
Account territory, case, lead,
and opportunity sharing
rules are available in:
Enterprise, Performance,
Unlimited, and Developer
Editions
Campaign sharing rules are
available in Professional
Edition for an additional cost,
and Enterprise,
Performance, Unlimited,
and Developer Editions
Custom object sharing rules
are available in: Enterprise,
Performance, Unlimited,
Developer, and
Database.com Editions.
USER PERMISSIONS
To recalculate sharing rules:
• “Manage Sharing”
Asynchronous Parallel Recalculation of Sharing Rules
Speed up sharing rule recalculation by running it asynchronously and in parallel.
When you create, update, or delete sharing rules, the resulting recalculation is now processed
asynchronously and in parallel. The recalculation is run in parallel and asynchronously in the
background, which speeds up the process and provides better resilience to site operations such as
patches and server restarts. You’ll receive an email notification upon completion. Before the
recalculation is completed, you can’t run other sharing operations such as creating a sharing rule
or updating the organization-wide defaults.
Parallel sharing rule recalculation is also run in these cases.
EDITIONS
Available in:
• Professional
• Enterprise
• Performance
• Unlimited
• Developer
68