Sharing a record results in all child record being seen by the shared with Party

(0) Share

Report

Posted on by Bill Hanna

116

Hello it's been a while since I configured this security configuration:

I configured security for a specific set of users that can only view their own contacts and their own opportunities.

However when we share a contact with them, they can view all opportunities for that contact record even though their security only allows them, create, share or append to, append only their own opportunities?

Thanks

All responses (4)

Answers (1)

Rakesh90 200 on at

Like (0)

Report

RE: Sharing a record results in all child record being seen by the shared with Party

Yes. I would suggest creating a team like 'Opportunity reviewers'. Assign the security role that already has Read permissions on Opportunity to this team. You can then add/remove users to this team who need Read access to Opportunity as and when required.
Bill Hanna 116 on at

Like (0)

Report

RE: Sharing a record results in all child record being seen by the shared with Party

Thank you for that, but now I have other users that need to see that, do I have to change their security to view all opportunities?
Verified answer

Rakesh90 200 on at

Like (1)

Report

RE: Sharing a record results in all child record being seen by the shared with Party

Hi,

This is because the Contact - Opportunity relationship has a Parental type relationship out of the box.

You can update this by changing the Type of behavior to 'Configurable cascading' and Share to 'Cascade user-owned'

If the above suggestion worked, please mark my answer as verified
Suggested answer

Ram Prakash 2,287 on at

Like (0)

Report

RE: Sharing a record results in all child record being seen by the shared with Party

Hi @Bill Hanna,

Try checking the Relationship behaviour.

Open CRM System

Click Settings

Then Select Advance Settings

Then Select Customisation and customize the System

Expand Entities, Expand Opportunity

Click Relationship then open contact relationship and check the Share Behaviour ( change it to None)

Try the same for account too.

Please marke as Answer if it's helpful

microsoftcrmtechie.blogspot.con