Announcements
I'm having issues trying to troubleshoot one of my roles for my client.
Requirement:
I have to create a custom activity (Approval Activities) which allows users to only approve their activities linked to 'Campaign'.
Users can see all 'Campaign' records, but only able to update their Business Unit 'Campaigns. That's working.
When an approval activity gets created for the relevant approver (for Approval Activity).
Only that approver (user) can update their records linked to 'Campaign' record.
This is my current setup and its not working. Users are able to update each others approval activities:
Campaign section:
What we also picking up:
If campaign owner captures the Campaign (or I assign him/her a campaign), they can edit all of the activities (even though his role is Read=Basic(User) privilege). If someone else owns the Campaign then they can't as we intend.
Please assist?
Thanks
Hi,
As mention in the screen shots the (SHARE) privileges with the access level of (half pie Business Unit) are assigned to the users.
Image
Change the access level of the (SHARE) privileges to (None Selected) to restrict the users to update the record they don’t owned. As SHARE) privilege required to give access to a record to another user while keeping your own access. Which records can be shared depends on the access level of the permission defined in your security role.
The owner of a record or a person who has the Share privilege on a record can share a record with other users or teams. Sharing can add Read, Write, Delete, Append, Assign, and Share privileges for specific records.
Hope this works for you,
Please mark the answer as verified, if it resolve your issue.
Thanks,
Hi Jim,
I have checked that yes. They have the correct access - I'm checking that the relationship between Campaign and Activity is not the reason. Currently its built on Parental, I'm trying Cascading now. Will advise shortly.
Thanks and I do appreciate the help.
Regards
Greg
Greg,
Have the User goto the Activity record, in the button bar click Check Access, this should show you what access the User has to the record and what roles provide that access. This should confirm that only Campaign Admin Test is granting access to activities.
Hi Jim,
If you go through my initial request. Users are able to update their own activity. The issue is that users are able to update activity records they don't own with write-user level privilege. That shouldn't be the case.
Thanks
Greg
Greg,
Is the User trying to update an Activity that they own?
That didn't work.
Hi Jim,
Just to confirm my understanding is correct:
I'm changing Append and Append To on 'Activity' from half pie(Business Unit) to full pie(Organization)
That's it?
Thanks
G
Greg,
Try giving Organization Append and Append To on the Activity. The User can read all Campaigns but can only Append/Append To ones owned by Users in their business unit or below.
André Arnaud de Cal...
293,302
Super User 2025 Season 1
Martin Dráb
232,114
Most Valuable Professional
nmaenpaa
101,156
Moderator