Hi
I have a custom entity with some fields on it that need to be readable by any user that has read-access to the entity via security roles, but only updateable by one specific Team, regardless of whether the current user has write-access permissions to that entity record as a whole.
If I use FLS (which I thought would be the correct way), then I have to create a Team for all users that need to be able to read those fields. The problem with this is that this list changes...
Is there a way to set the default access level on a FLS field to read-only, and then use the field security profiles to grant additional permissions, e.g. write?
I considered a business rule, but how would you check team membership?
The only other way I can think to do this is to remove the FLS, and rather use a real-time workflow that fires on update of any of the "read-only" fields, and then use Demian Rasko's Workflow Tools to determine if the triggering user is in the team or not, and cancel the workflow if not.
Has anyone had a similar issue with resolution that they could share?
Much appreciated,
James
