How to use privacy rules to partition data

[mikeloc]

Hi there, @mrunge… the limitation with privacy rules that is documented in these threads (and a bunch of others, too) makes what you have described a bit harder than it should be.

Privacy Rules - Company Data

I know this topic is quite often talked about and i’ve watched several videos on it, not to mention searched around the forums, but i still can’t seem to get a grip on how to make these rules work for my app: My app has: Users (employees of a company) Companies (with employees) Sites I’m trying to restrict access to only the data for the company a user belongs to, so Lets say i’m a user, i only want to access Sites and user data for my company. I’ve tried: When: “This Site’s creator’s comp…

Rules that use "This Attendee's X's Y" can't grant search access right now

Hi Folks… I am building an events application that will have users who are running events (“Subscribers”) and users who are attending events (“Attendees”). So that different Subscribers don’t see each other’s Attendees, then each Attendee data type contains the user name of the Subscriber whose event they are going to. I am then using Roles to restrict that access. However… When I set a role up as “When This Attendee’s Subscriber User is logged in” I get this strange message Rules that us…

The way to go seems to be to store the company on the records associated with that company as well as storing the company on the user. With that structure in place, it is easy to construct a privacy rule that makes sure a user can only see records that belong to their company (i.e., something like Current User's Company is This Record's Company).

Hope this helps.

Best…
Mike