+ Start a Discussion
HaroldHHaroldH 

Security Q2: Cannot view custom objects with Master/Detail field

This next question seems security/permission related, too.

The scenario:

1. We have a custom object, MyObject__c, which contains a Master/Detail relationship to Opportunity.

2. A user is logged in via the API, and cannot query any records from this object, even records the user created previously.

3. Changing the permissions profile for this user to Administrative Permissions/View All Data checked On will result in the query returning records, as expected.

When the Opportunity is actually created by a different user, but the OwnerId field is set to the specified user, no records are returned. When the Opportunity is actually created by the specified user, no records are returned.

If the relationship field is a Lookup type, rather than Master/Detail type, the query returns records even if "View All Data" is not checked On.

So: A user with a profile that does not have Administrative Permissions/View All Data checked On may not view records in a custom object containing a Master/Detail field. Am I missing something here?

Message Edited by HaroldH on 06-28-2004 11:29 AM