Summary

This chapter introduced the data security features provided by the Force.com platform. These features can eliminate much of the effort required in traditional application development to build basic security infrastructure. Here are a few points to consider before moving on:

Data can be protected at the object, field, and record level.

Profiles control access to objects and fields. A combination of object and field permissions plus page layouts determines the degree to which a field is accessible to users.

Most records have a built-in concept of ownership. The record’s owner, plus organization-wide defaults and sharing reasons that override these defaults, determines nonowners’ rights to view and modify records.