function readOnly(count){ }
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
+ Start a Discussion

Prevent viewing of user records

Does anybody know if there is a way to setup a user profile so it cannot view any user records?


i.e. if you create a new profile & de-select all object level access rights, users with that profile can still search & view all user records in the org.


Is there a way to prevent this?




You can do it by making the object private in your org wide defulat settings. Click setup --> Security controls --> Sharing settings --> click edit under org wide defaults and change the object setting to private so that users cannot get to see the records.






I checked in the sharing settings but User was not listed as an available object to manage settings for.  


Any suggestions?