Hi Eric,

The test method fails in both environments. I found out about the issue during a major release, so for the time being I commented out that method so I could push my other changes into production. I found out about the OWDs after doing some digging when trying to go back and fix it.

1. Spelling errors - I checked and even rewrote that block and used the lookup glass to make sure I selected them appropriately. Also, if it was misspelled, I got an error that 'this is not a valid selection.'

2. In both environments, my enrollment user has read and write access to the account (OWDs take care of this). If it was a required field error, wouldn't the error returned from the test class repeat the validation rule/required field instead of a insufficient privs?

3. For this question, I tried to simplify this as much as possible by turning off all of my workflow rules that fire on the opportunity, account, and task and turning off all triggers except for my opportunity trigger, and then commented out the lines that invoke any other class than the one that I'm testing. Even with inactivating all of these, the test class still fails.

* The before update trigger on this Oppo? Turned it off. It's a straight copy of the Owner field into a user lookup field.

* Does the task get inserted? Manually, yes in both environments. In the test class, no.

* Any before/after insert triggers on the inserted Task? Turned those off too. Both of the ones on copy a value up to the contact/lead to fire out email alerts.

* Any workflows based on the new task? Turned these off as well. None of the WF rules on here apply to the 'client services' record type.

* Any after update triggers on the oppo? Turned those off, but yes we have a few.

* Any workflows that execute upon the updated Opportunity? Turned all those off, and yes, we have several, around 100.

As far as how far along in the debug log this gets, with everything inactivated, here's what the debug log reports for the few events just before it updates the opportunity:

10:27:01.977 (14977208000)|SOQL_EXECUTE_BEGIN|[183]|Aggregations:0|select Id from Task where (AccountId = :tmpVar1 and OwnerId = :tmpVar2)
10:27:01.998 (14998131000)|SOQL_EXECUTE_END|[183]|Rows:0
10:27:01.998 (14998159000)|HEAP_ALLOCATE|[183]|Bytes:4
10:27:01.998 (14998171000)|HEAP_ALLOCATE|[183]|Bytes:0
10:27:01.998 (14998265000)|HEAP_ALLOCATE|[183]|Bytes:4
10:27:01.998 (14998289000)|VARIABLE_SCOPE_BEGIN|[183]|tasks|LIST<Task>|true|false
10:27:01.998 (14998324000)|VARIABLE_ASSIGNMENT|[183]|tasks|{"serId":1,"value":[]}|0x6d782ed8
10:27:01.998 (14998333000)|STATEMENT_EXECUTE|[185]
10:27:01.998 (14998467000)|STATEMENT_EXECUTE|[187]
10:27:01.998 (14998561000)|VARIABLE_ASSIGNMENT|[187]|this.Vertical_Enrollment_Rep__c|"00530000001cUOCAA2"|0xa8a7a5
10:27:01.998 (14998570000)|STATEMENT_EXECUTE|[189]
10:27:01.998 (14998578000)|HEAP_ALLOCATE|[189]|Bytes:35
10:27:01.998 (14998612000)|USER_DEBUG|[189]|DEBUG|----------------------Start Update!
10:27:02.082 (15082195000)|HEAP_ALLOCATE|[190]|Bytes:8
10:27:02.082 (15082221000)|STATEMENT_EXECUTE|[190]
10:27:02.082 (15082228000)|STATEMENT_EXECUTE|[191]
10:27:02.083 (15083299000)|STATEMENT_EXECUTE|[192]
10:27:02.083 (15083336000)|HEAP_ALLOCATE|[192]|Bytes:8
10:27:02.083 (15083354000)|DML_BEGIN|[192]|Op:Update|Type:Opportunity|Rows:1
10:27:02.083 (15083374000)|HEAP_ALLOCATE|[EXTERNAL]|Bytes:8
10:27:02.403 (15403582000)|DML_END|[192]
10:27:02.403 (15403689000)|EXCEPTION_THROWN|[192]|System.DmlException: Update failed. First exception on row 0 with id 006e0000003ligDAAQ; first error: INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY, insufficient access rights on cross-reference id: []
10:27:02.405 (15405192000)|HEAP_ALLOCATE|[192]|Bytes:184
10:27:02.607 (15607886000)|FATAL_ERROR|System.DmlException: Update failed. First exception on row 0 with id 006e0000003ligDAAQ; first error: INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY, insufficient access rights on cross-reference id: []

Class.OpportunityVerticalKOCallEnrollmentTest.shouldCreateTaskOnUpdate: line 192, column 1
10:27:02.607 (15607917000)|FATAL_ERROR|System.DmlException: Update failed. First exception on row 0 with id 006e0000003ligDAAQ; first error: INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY, insufficient access rights on cross-reference id: []

Class.OpportunityVerticalKOCallEnrollmentTest.shouldCreateTaskOnUpdate: line 192, column 1
10:26:56.205 (15607941000)|CUMULATIVE_LIMIT_USAGE

4. Took a read at both of those articles yesterday, both of those great articles.

For the first one, my enrollment user has the same access to the same RecordTypes (on Account, Opportunity, and Task) in production and the sandbox.

For the second article, I thought it might have fallen into scenario 1, as this class is creating a task based on a field (enrollment user) being filled in. Typically the process is our data entry team fills this out, which creates a task for an enrollment rep. Data entry is located above the enrollment rep in the company role hierarchy. However, the way I put the test together, the running user is the enrollment rep, so they're assigning the task to themselves.

I thought about scenario 2 as well. I do know that if I have the enrollment rep create the account in my run as block, then the class passes. 99% of the time, the enrollment user will not be creating or owning accounts. They have edit access. Our sharing model for accounts did not change - it remains as "Owner in all internal users shared with all internal users." Manual testing confirms that they have read/edit access to both the account and opportunity that they do not own.

5. I did throw in the without sharing keyword on my class just to be sure that it was running w/o regards to the OWD. Test class still fails with it.

I have a meeting later today with our development consultant and I'm hoping he can get an inside look at everything and see if he can coach me through it. I'll post w/e the solution was if we figure one out. I appreciate all your time looking at this and sharing your wisdom. 

- Kelly

Here's the class and the trigger (no commented out code) if you were interested in looking at it. 

public without sharing class OpportunityVerticalKOCallEnrollmentTask {

	public static void createKOCallEnrollmentTask(List<Opportunity> opportunities) {
		if(TriggerHandler.firstRunOpportunityVerticalKOCallEnrollmentTask) {
			Task[] tasks = new Task[] {};
			Id currentUserId = UserInfo.getUserId();
			String currentUserProfileId = UserInfo.getProfileId();
			Date taskDate = System.today().addDays(3);
			List<Opportunity> opportunitiesForTaskCreation = new List<Opportunity>();
		
			RecordType recordType = RecordTypeResolver.find('Task', 'Client Services');
		
			//Exclude all System Admins from creating this task
			if (new Set<Id> {'00e30000000dSKN'}.contains(currentUserProfileId))
				return;
			
			for (Opportunity opportunity : opportunities) {
				if (opportunity.Vertical_Enrollment_Rep__c != null &&
				 	opportunity.Kick_Off_Complete_Enrollment__c == null &&
				 	opportunity.Vertical_Go_Live_Date__c == null &&
				 	opportunity.Never_Going_Live__c == null) {		
					
					opportunitiesForTaskCreation.add(opportunity);
				}
			}
			
			if (opportunitiesForTaskCreation != null) {
				for (Opportunity opportunity : [SELECT AccountId, Account.Name, Vertical_Enrollment_Rep__c FROM Opportunity WHERE Id IN :opportunitiesForTaskCreation]) {
					
					tasks.add( new Task (Subject = 'Vertical Kick Off Call: ' + (opportunity.AccountId != null ? opportunity.Account.Name : '<Unknown>'),
									 	 OwnerId = opportunity.Vertical_Enrollment_Rep__c,
									 	 ActivityDate = taskDate,
									 	 WhatId = opportunity.Id,
									 	 ReminderDateTime = DateTime.newInstance(taskDate, Time.newInstance(8, 0, 0,0)),
									 	 IsReminderSet = True,
									 	 RecordTypeId = recordType.Id));			
				}
		
				insert tasks;
			}		
		}
		TriggerHandler.firstRunOpportunityVerticalKOCallEnrollmentTask = false;
	}
}

trigger OpportunityTrigger on Opportunity (after insert, after update, before insert, before update) {
	
	//Run Before triggers
	if (trigger.isBefore) {
		if (trigger.isInsert || trigger.isUpdate) {
			List<Opportunity> opportunities = new List<Opportunity>();
			Set<Id> opportunityIds = new Set<Id>();
			
			for (Opportunity opportunity : Trigger.new) { 
				opportunities.add(opportunity);
				opportunityIds.add(opportunity.Id);
			}
			
			try { 	
				OpportunityOwnerFullName.setOwnerFullName(opportunities);
			}
			catch (System.DMLException e) {
				for (Opportunity opportunity : opportunities) 
					opportunity.adderror(e.getMessage());
			}
			catch (Exception e) {
				for (Opportunity opportunity : opportunities) 
					opportunity.adderror(e.getMessage());			
			}
		}
	}
	
	//Run After triggers
	else if (trigger.isAfter) {

		List<Opportunity> opportunities = new List<Opportunity>();
		List<Opportunity> oppsInsertClosed = new List<Opportunity>();
		Set<Id> opportunityIds = new Set<Id>();

		for (Opportunity opportunity : Trigger.new) { 
			opportunities.add(opportunity);		
			opportunityIds.add(opportunity.Id);
			
			if(opportunity.IsClosed) 
				oppsInsertClosed.add(opportunity);
		}	
		
		//On After Insert 
		if(trigger.isInsert) {
			try { 
				if(opportunities != null) {
					OpportunityVerticalKOCallEnrollmentTask.createKOCallEnrollmentTask(opportunities);
					OpportunityVerticalKOCallTrainerTask.createVerticalKOCallTrainerTask(opportunities);					
				}
					
				if(opportunityIds != null) {
					OpportunityAddContactRoles.AddToOpportunities(opportunityIds);
					OpportunityPrimaryCampaignSource.setPrimaryCampaignSource(opportunityIds); 
					OpportunityPrimaryCampaignSource.setLeadSourceAndMediaType(opportunityIds);	
					OpportunityAccountStatusFromOpportunity.setAccountStatus(opportunityIds);
				}

				if(oppsInsertClosed != null)
					OpportunityAttritionUpdatePMandCH.updatePMandCHonAccount(oppsInsertClosed);				
			}
			catch (System.DMLException e) {
				for (Opportunity opportunity : opportunities) 
					opportunity.adderror(e.getMessage());
			}
			catch (Exception e) {
				for (Opportunity opportunity : opportunities) 
					opportunity.adderror(e.getMessage());			
			}
		}	
		
		//On After Update	
		else if (trigger.isUpdate) {
			Set<Id> oppIdsOnClose = new Set<Id>();	
			List<Opportunity> oppsOnClose = new List<Opportunity>();
			List<Opportunity> enrollmentTaskOpps = new List<Opportunity>();
			List<Opportunity> trainerTaskOpps = new List<Opportunity>();
				
			for (Opportunity opportunity : opportunities){
				//Closed Opportunities
				if (Trigger.oldMap.get(opportunity.Id).IsClosed == false && Trigger.newMap.get(opportunity.Id).IsClosed == true) {
					oppsOnClose.add(opportunity);
					oppIdsOnClose.add(opportunity.Id);
				}
				
				//Enrollment Rep Updated
				if (Trigger.oldMap.get(opportunity.Id).Vertical_Enrollment_Rep__c  != Trigger.newMap.get(opportunity.Id).Vertical_Enrollment_Rep__c ) 
					enrollmentTaskOpps.add(opportunity);
					
				//Trainer Rep Updated
				if ((Trigger.oldMap.get(opportunity.Id).Enrollment_Completed__c == null || Trigger.oldMap.get(opportunity.Id).No_Enrollment_Needed__c == false) &&
					(Trigger.newMap.get(opportunity.Id).Enrollment_Completed__c != null || Trigger.newMap.get(opportunity.Id).No_Enrollment_Needed__c == true))
					trainerTaskOpps.add(opportunity);
			}
			
			try { 
				if(oppsOnClose != null)
					OpportunityAttritionUpdatePMandCH.updatePMandCHonAccount(oppsOnClose);
						
				if(oppIdsOnClose != null) {
					if(TriggerHandler.firstRunOpportunityAddContactRoles) {
						OpportunityAddContactRoles.AddToOpportunities(oppIdsOnClose);
						TriggerHandler.firstRunOpportunityAddContactRoles = false;
					}
										
					OpportunityPrimaryCampaignSource.setPrimaryCampaignSource(oppIdsOnClose);
					OpportunityPrimaryCampaignSource.setLeadSourceAndMediaType(oppIdsOnClose);
				}
				
				if(opportunityIds != null) 	
					OpportunityAccountStatusFromOpportunity.setAccountStatus(opportunityIds);	
				
				if(enrollmentTaskOpps != null) 
					OpportunityVerticalKOCallEnrollmentTask.createKOCallEnrollmentTask(enrollmentTaskOpps);
				
				if(trainerTaskOpps != null)
					OpportunityVerticalKOCallTrainerTask.createVerticalKOCallTrainerTask(trainerTaskOpps);
			
			}
			catch (System.DMLException e) {
				for (Opportunity opportunity : opportunities) 
					opportunity.adderror(e.getMessage());
			}
			catch (Exception e) {
				for (Opportunity opportunity : opportunities) 
					opportunity.adderror(e.getMessage());				
			}			
		}
	}
}