How to use privacy rules to partition data

[mrunge]

Hi
I need to partition data based on company name.
I.e. If a user belongs to company A then any records pertaining to company B, C or D should be hidden.
Seems like a simple enough thing to do but I can’t figure it out.
Any assistance will be appreciated.
Thanks.

[mikeloc]

Hi there, @mrunge… the limitation with privacy rules that is documented in these threads (and a bunch of others, too) makes what you have described a bit harder than it should be.

Privacy Rules - Company Data

I know this topic is quite often talked about and i’ve watched several videos on it, not to mention searched around the forums, but i still can’t seem to get a grip on how to make these rules work for my app: My app has: Users (employees of a company) Companies (with employees) Sites I’m trying to restrict access to only the data for the company a user belongs to, so Lets say i’m a user, i only want to access Sites and user data for my company. I’ve tried: When: “This Site’s creator’s comp…

Rules that use "This Attendee's X's Y" can't grant search access right now

Hi Folks… I am building an events application that will have users who are running events (“Subscribers”) and users who are attending events (“Attendees”). So that different Subscribers don’t see each other’s Attendees, then each Attendee data type contains the user name of the Subscriber whose event they are going to. I am then using Roles to restrict that access. However… When I set a role up as “When This Attendee’s Subscriber User is logged in” I get this strange message Rules that us…

The way to go seems to be to store the company on the records associated with that company as well as storing the company on the user. With that structure in place, it is easy to construct a privacy rule that makes sure a user can only see records that belong to their company (i.e., something like Current User's Company is This Record's Company).

Hope this helps.

Best…
Mike

[mrunge]

Hi @mikeloc
Many thanks for the method. It makes sense and I’ll try it now.
I’ll start with a user who signs up for a demo.
The demo company will have a bunch of records already created so they can navigate the system as an Administrator or an ordinary user.
I’ll let them make changes and create transactions and view reports, but as soon as they log out a backend workflow will restore the demo data.
Many thanks.