OWD - Sharing Settings

Owd: Organization wide default

This is specify witch records in the table can be viewed by the user and what type of operation user can perform on the records.

Private: If you define OWD as private only owner of the records can perform R|W|D operations on the records

Public Read: If you define OWD as Public Read all the Users in the Organization can perform read operation on all the records and they can perform read and write and delete operations on the records for which they are owners.

Public Read|Write: If you define OWD as Public Read|Write all the users in the organization can perform Read and Write Operations on all the records and owners can perform Read|Write|Delete operations on their own records.

Public Read|Write|Transfer: This OWD can be defined only in Case and Lead object. If you define Public Read|Write|Transfer on case object or Lead Object all the users can perform operations of  Read|Write|Transfer an all the records.

Public Full Access: This can be given only on Campaign Object. If OWD given as full Access all users can perform all type of operations on all the records.

Control by the Parent: If two Objects are connected by Master Detail relationship then OWD defined on the parent  object is applied for the corresponding child record.

Grant Access Using Hierarchies:

If you enabled this option all the users who is above the record owner role they can perform all the operations on the records.

Note: By default this option is enabled for standard objects and we can't disable it. for Custom Object it is optional.

Queue: When we want a group of users to be Owner for a record then we use the concept of Queue.

Note: If you create a queue, you have to select at least one Object

Queue member can be any specific user or user with given role or user with given role and subordinate or user from another group

Public Group: When we want to list of users and under one entity we call it as public Group.

Public Group can be created by only System Administrator

 Group Members can be user or user with given role or users with given role and subordinate or public group

Sharing Rules:

These are used to grant extract access on the records apart from the records what he is getting through OWD

These are four type.

1. Criteria based Sharing Rule

2. Manual Sharing Rule

3. Owner based Sharing Rule

4. Apex Sharing Rule

Owner based Sharing Rule: 

Records which are own by the user who have a given role or role subordinates or public groups or a queue are  share with users with given role or role subordinates or public groups or a queue. 

Sharing Rule will be given only on the object which as a owd of private or Public read

Ex: Records which are owned by the user in the organization whose role is developer are shared with the user whose role is HR Manger.

Criteria based Sharing Rule:

records which are matching the given criteria are shared with users who have a given role or role and subordinate or  a public Group 

Ex: All the application records whose type is Blocked are shared with user whose role is Branch-manager

Manual sharing: When we want to share a particular record with users who have a given role or roller subordinate or public group or specify user then we use manual share

Apex Sharing Rule:

When we want to share a record using Apex program then we use Apex based sharing rule.