Subdomain 1.1: Given a scenario, determine the implications to record and field data access (Sharing model, controlled by parent, grant access by hierarchies, dashboard and report folders access, email folder access, Territory Management).
1.A nonprofit uses a master-detail relationship from Donation__c (detail) to Campaign__c (master), with Donation__c sharing set to Controlled by Parent. The org now needs certain volunteers to see specific individual donations even when they have no access to the parent campaign at all. What is the correct way to address this requirement?
- A.Create a criteria-based sharing rule directly on Donation__c to share matching donation records with the volunteers
- B.Change Donation__c's sharing setting away from Controlled by Parent so it has its own independently configurable org-wide default and sharing rules
- C.Grant the volunteers the "View All" object permission on Campaign__c so they inherit visibility into related donations
- D.Add the volunteers to a public group and share the Campaign__c folder with Viewer access
Show answer & explanation
Correct answer: B — Change Donation__c's sharing setting away from Controlled by Parent so it has its own independently configurable org-wide default and sharing rules
- A. While Donation__c remains set to Controlled by Parent, its sharing is not independently configurable, and no sharing rule can be created directly on the child object; the setting must first change for standalone rules to become available.
- B. Switching Donation__c away from Controlled by Parent gives it its own org-wide default and enables independent sharing rules or manual sharing to be defined on the object, which is the required change to grant access to donations without corresponding campaign access.
- C. View All on Campaign__c would grant broad visibility into campaigns generally, and because Donation__c still mirrors the parent, this does not achieve the stated goal of donation access without campaign access; it also grants far more than intended.
- D. Folders relate to reports and dashboards, not to records of a custom object like Campaign__c, so sharing a folder has no effect on record-level access to donation records.