Security and Sharing Rules

Another important function that we'll need to build into our app is the ability to restrict access to data that particular users shouldn't see, without preventing other users from performing their jobs effectively. We're going to implement this requirement with a group of components that we've grouped under a single term: security and sharing rules.

With security and sharing rules, we'll first specify which custom objects a particular user should be allowed to create, view, or edit (for example, Candidate and Position), and then which instances of those objects should be accessible (for example, the records for candidate John Smith or the Senior Sales Manager position). Controlling our data either with the wide brush of object-level security or with the more detailed brush of record-level security will give us a lot of power and flexibility in controlling what users can and can't see.