Permissions setup where users can create records and view/update/delete their OWN records but not anyone else's

[mark-piller]

Hi Jacob,

Please see the following how-to article that describes how to configure the Owner Policy. The article focuses on the data retrieval use-case, however, deletion and update would follow the suit:

How to get objects that "belong" to the logged-in user (Owner Policy explained)

As the users of your app create new things objects in the database, the use-case of retrieving data that “belongs” to the user comes up quite frequently. Whether your app users create orders, invoices, or social media posts, the mechanism for retrieving data that’s associated (i.e. belongs) to the user is important. In this recipe, I will describe the simplest and the most secure way to get the data that belongs to the currently logged-in user. Let’s review some background information first. It…

Regards,
Mark