The most crucial part of any enterprise-level application (built on Salesforce or otherwise) is the control of data. The litmus test for the effectiveness of an enterprise-level application is the way in which we restrict unauthorized access to data.
The following diagram illustrates the record sharing in an organization:
The four records A, B, C, and D are evenly distributed between the reps and the Manager. Rep 1 should only see record A, Rep 2 should only see record B, and so on.
At the top of the chain, the Super Manager can see all the records under him.
Before we design the application, we first need to consider the stakeholders of the application:
Who will be using the application?
What will these users do?
Is the data sensitive or critical?
Who will be customizing the application?
Are there any global records that should not be edited by the users?
Which set of users will be editing which data?
These are some of the questions that need to be addressed before we understand...