Difference between revisions of "About Roles and Data Visibility"

Revision as of 22:40, 7 November 2011

Custom Access Criteria are a set of rules which define the Users who can perform various Actions (add, view, update, delete) on Records in Objects
Visibility Controls define whether User data is available to other users, whether records in objects are visible or hidden and optionally, whether the User has rights to modify data records based on Record Ownership
Data Sharing Policies are a set of rules that enable users to share data across Teams, with the level of access based on each User's Role in a primary Team

Note that Team Data Sharing Policies override record-level access specified by individual Visibility Controls.

Field Visibility (Role Based Permission Control), a security control that provides data visibility rights at the Field level
Role Based IP Login Restriction, a security control that restricts login to users in a limited IP address range

@@ Line 1: / Line 1: @@
 __NOINDEX__
 :*[[Custom Access Criteria]] are a set of rules which define the [[Users]] who can perform various Actions (add, view, update, delete) on [[Record]]s in [[Objects]]
-:*[[Visibility Controls]], a security control used to define whether User data is available to other users, whether records in objects are visible or hidden and optionally, whether the User has rights to modify data records based on [[Record Owners|Record Ownership]]
+:*[[Visibility Controls]] define whether User data is available to other users, whether records in objects are visible or hidden and optionally, whether the User has rights to modify data records based on [[Record Owners|Record Ownership]]
+:*[[Data Sharing Policies]] are a set of rules that enable users to share data across [[Teams]], with the level of access based on each [[User]]'s [[Role]] in a primary [[Team]]
+::: Note that [[Team Data Sharing Policies]] override record-level access specified by individual [[Visibility Controls]].
 :*[[Role Based Permission Control|Field Visibility (Role Based Permission Control)]], a security control that provides data visibility rights at the [[Fields|Field]] level
 :*[[Role Based IP Login Restriction]], a security control that restricts login to users in a limited IP address range
-:*[[Data Sharing Policies]], a set of actions and rules that enable users to share data across [[Teams]], with the level of access based on each [[User]]'s [[Role]] in a primary [[Team]]