locked
Setting up a Security Role to have different "Append To" requirements for different child entities RRS feed

  • Question

  • So for what I am working on, I have a security role. This security role must be able to create new Notes on any Account, regardless if it is the owner of that Account. This security role must also be restricted, however, in creating Opportunities on that same Account, restricted to only creating opportunities on Accounts that the user owns.

    From what I can tell, the "Append To" permission applies to all child entities. Is there a way to, using security role permissions, set it so that this security roll allows Account to be Appended To from any user in the case of Note entities, but restrict the Append To to only users who own the account in the case of Opportunity entities?

    Thanks

    Thursday, September 3, 2015 3:16 PM

All replies

  • I'm not sure that this can be done via security roles. To link two records as in your example, two permissions are required Append on the Opportunity or Note and Append To on the Account.

    If you set the level for Append To on Account to Organization, then the user can link records for which they have the append permission to any account.

    If you set the level for Append To on Account to User, then the user can link records for which they have the append permission to only account they own.

    You are right in that the Append To privilege does not distinguish what type of record is being linked and I don't think messing around with Append privileges helps.

    By allowing Append To at the Organization level (so that Notes can be linked to any account), then it isn't possible to restrict opportunities being linked to only accounts the user owns.

    Perhaps the way to implement this is in JavaScript which can check that the owner of the account matches the user (but this will only work in the web interface and will not prevent opportunities linked to any account via imports) or a plug-in (which will require development but will be enforced regardless of how the opportunity is created).

    Monday, September 7, 2015 10:52 PM
    Moderator