Emergency Security Account Visibility

Companies keep a reserved emergency administrator account that should not clutter user lists or be edited by other administrators. This module marks one user and its contact as a security identity, shows it under a neutral name, and removes it from web lists, searches, selectors, grouped views and mention suggestions for everyone else. Direct reads and business logic are not filtered, so documents that reference the account still open normally. It extends Users and Contacts with record rules that protect the account from edits and deletion by other administrators.

1. 1

   Mark the security identity

   A user carries a security-user flag and its partner carries a security-identity flag. These flags can only be set by the superuser or the module's own marker process, otherwise a clear error is raised. The user must be internal and the partner must be dedicated to a single user.

   • Fields: security user and security identity flags
   • Superuser or marker process only
   • Internal user, dedicated partner
2. 2

   Apply the neutral identity

   An install hook and the user write logic apply a neutral display name to the reserved account. Other users see that name wherever the account is shown. Audit fields such as creator, last writer, message author and login are left as they are.

   • Neutral display name
   • Audit relations unchanged
   • Applied by hook and write
3. 3

   Hide from lists and selectors

   A shared identity filter adds a discovery domain to name search, list reads, grouping, progress bars and search panels on users and partners. The account also disappears from mention suggestions in the chatter. The superuser still sees everything.

   • Name search and lists
   • Grouped views and search panels
   • Chatter mention suggestions
4. 4

   Keep documents working

   Direct reads, ORM searches and business logic are not filtered. Documents, messages or activities created by the account continue to open for everyone without access errors. Hiding therefore affects only discovery screens.

   • Direct reads unaffected
   • No access errors on linked documents
   • Discovery screens only
5. 5

   Protect against edit and delete

   Two record rules stop other administrators from writing to or deleting the account. Only the superuser can modify it. Attempts by others are refused with a message.

   • Write-protect rule
   • Unlink-protect rule
   • Only the superuser can change it

Back to version applications