In Salesforce, File access can be given to users in the following ways:

• Manual Sharing: Explicitly adding a user as a Viewer or Collaborator.

• Ownership: The user who uploaded the file is the owner by default.

• Inferred Access: Access is inherited from the related record (e.g., a Case or Account) if the "Set file access to Set by Record for files attached to records" setting is enabled.

 

 

* If the "Set file access to Set by Record for files attached to records" is enabled as part of your File Slayer configuration, any files uploaded before this setting was on are unaffected by it and may require manual sharing.

• Setting location: Salesforce Setup | Salesforce Files | General Settings

• Setting description: When enabled, users’ access to files attached to a record follows their record access: Read/write record access provides Collaborator file access. Read-only record access provides Viewer file access. When disabled, all files attached to a record have Viewer access.

 

What access do users need to have to interact with the Files (File Slayer) Component?

Our component replaces the standard Salesforce Files List and is for all users in the org. They should be assigned the "File Slayer Files Component" permission set. This gives users access to the Files Component and should be assigned to all users in the org, licensed and unlicensed.

Licensed users get access to all features, notably the “Clean View,” which hides nuisance and duplicate files for the objects enabled for File Slayer. Ensure they have read, insert, and delete access to the Document Object in Salesforce.

 

What access do users need to have to interact with the File Slayer Library?

The File Slayer Library allows users to manage files across multiple objects and records. People tasked with file cleanup will need a File Slayer License and the File Slayer Library permission set. They also need standard Salesforce “View All Data,” “Modify All Data,” and “Query All Files” permissions to access all features of the Library.

 

In what situation should file sharing be bypassed?

System Administrators have full access to files and don’t need to bypass security. Other users with restrictive permissions may need a security bypass to perform file cleanup.

File Slayer allows administrators to bridge the gap by granting the elevated access required for the Component and Library to function correctly when users don’t have the necessary permissions for Files.

For the Files (File Slayer) Component, the following is true:

• The File Owner, users with the “Modify All Data” permission, and users with the "Delete Salesforce Files" permission can delete without bypassing security.

• The File Owner and Collaborators can edit without bypassing security.

Without the above permissions, users with view access to files on related records will need to bypass security to perform File Slayer actions (block and unblock) on the component.

To bypass sharing in the Files (File Slayer) Component, configure the “Bypass File Security - Files Component” setting in the setup wizard. When enabled, record owner and users with both "Read" and "Edit" access to the related record will have sharing bypassed.

 

For the File Slayer Library, the following sets of users can:

• The File Owner, users with the “Modify All Data” permission, and users with the "Delete Salesforce Files" permission can delete without bypassing security.

• The File Owner and Collaborators can edit without bypassing security.

Without the above permissions, users with view access to files on related records will need to bypass security to perform File Slayer actions (block, unblock, ignore, restore, deduplicate) on the library.

To bypass sharing in the File Slayer Library, assign users the 'File Slayer Library Bypass' permission set. It runs Library actions without sharing, so users can block, unblock, ignore, restore, and deduplicate files they do not own without the standard Salesforce 'Modify All Data' permission. Users will likely still need 'Query All Files' to locate files they do not own.

 

Related Resources:

Who Can See My File?