+ Start a Discussion
ministe_2003ministe_2003 

Why can users create opportunities on accounts they have Read Only access to?

I'm trying to get some control of record creation which has been a little too global previously and I've noticed a problem whereby users who only have read only access to an accounts and its opportunities can still create an opportunity on that account.  Once created they cannot edit it in any way so this seems like a bug to me.  The Sharing button on the account clearly says Read Only and the user does not have any special privileges like Modify All Data or anything like that, so why can he still create an opp?  It seems like an oversight in the security of the org and I fear that I'll not be able to control it.  FYI Opportunity OWS are set to Private.

 

Thanks

MagulanDuraipandianMagulanDuraipandian

Check the profile permission for Opportunity....

 

 

Regards,
Magulan D

ministe_2003ministe_2003

They have Read, Write, Edit, Delete; thats it.  No view all or modify all.  Since they only have Read Only access to the Account and its Opportunities (as confirmed on the Sharing page for the account) then these permissions should not allow them to create an oportunity.

MagulanDuraipandianMagulanDuraipandian

Since opportunity has Read, Write, Edit, Delete permissions, you will be able to create opptys.

Only associated opptys will follow Account's permission.

 

Regards,

Magulan D

Salesforce.com certified Force.com Developer.

SFDC Blog

If this post is your solution, kindly mark this as the solution.

ministe_2003ministe_2003

Are you sure?  That doesn't make sense.  In what sensible world does "Read Only" mean "Read and Create"?

BharathimohanBharathimohan

Hi,

 

Yes, this is possible.

Because, we have lookup relation between Account & Opportunity.

 

 

Hence the Object CRUD settings in Account will not have any effect on Opportunity.

Since the User is having Create permission on Opportunity, hence they are able to create it.

 

Regards,

Bharathi

Salesforce For All