Manage Security for Owner and Owner Management Chain

When you create a custom object record, by default, you become the owner. As an owner, you can filter records owned by you and your subordinates using the Record Set filter. See FAQ: What record sets is an owner permitted to search?

When you create a custom object, an Owner field is automatically created. You can access this field in Application Composer under the Custom tab of the Fields page. To access this page click the Fields node of the custom object.

This example illustrates how an owner can define the following security policies for the Trouble Tickets object:

• All users can create and read the record

• Only the owner and owner management chain can update the record

• Only the owner can delete the record

Managing Role Security as an Owner

1. Ensure that you're in an active sandbox session.

2. Navigate to Application Composer and on the main Overview page, select a custom object in the object tree.

3. Select the Security node. The object-centric Define Policies page appears.

4. Navigate to the row of the role whose levels of access you want to edit.

5. Select the Create check box.

6. Click the Read drop-down list, and then select Read All. The Functional Read option gets selected automatically.

7. Click the Update drop-down list, and then select Owner and Owner Management Chain. The Functional Update option gets selected automatically.

8. Click the Delete drop-down list, and then select Owner. The Functional Delete option gets selected automatically.

9. Click Save and Close.

   The security policies for the Trouble Tickets object are now updated to provide create and read access to all users, update access to owner and owner management chain, and delete access to only the owner.