Users allowed to mass transfer Accounts without having Edit perm on Account object.
Last updated 2018-01-18 ·Reference W-3844882 ·Reported By 1 users
According to doc "Mass Transfer Records", to mass transfer Accounts the user permissions needed are “Transfer Record” AND “Edit” on the object type (Account)
- Doc link: https://help.salesforce.com/apex/HTViewHelpDoc?id=admin_transfer.htm&language=en_US
However, users are able to mass transfer Accounts when given only "Transfer Record" AND "Read" on Account. "Edit" on Account is not being required.
1. Create a Profile with only "Read" on Accounts and "Transfer Records", and assign it to a User.
2. Login as that user, click on Accounts tab, and observe that "Transfer Accounts" link is visible.
3. Note that user is able to use mass transfer to transfer any Account which they can see.
Reported By (1)
Is it Fixed?
Any unreleased services, features, statuses, or dates referenced in this or other public statements are not currently available and may not be delivered on time or at all. Customers who purchase our services should make their purchase decisions based upon features that are currently available.