1. Profiles:

   1. Profile Object:

      Select p.UserType, p.PermissionsViewContent, p.PermissionsViewAllUsers, p.PermissionsViewAllData, p.Name, p.Id, (Select Username, Email From Users) From Profile p

   2. App、Object、Tab、Field、Page、Class...

2. Team:

   1. Account Team:

   2. Opportunity Team:

   1. Select o.UserId, o.TeamMemberRole, o.SystemModstamp, o.OpportunityId, o.OpportunityAccessLevel, o.LastModifiedDate, o.LastModifiedById, o.IsDeleted, o.Id, o.CreatedDate, o.CreatedById From OpportunityTeamMember o

   2. 可以为此对象创建Trigger.

   3. Select a.UserId, a.TeamMemberRole, a.SystemModstamp, a.LastModifiedDate, a.LastModifiedById, a.IsDeleted, a.Id, a.CreatedDate, a.CreatedById, a.AccountId, a.AccountAccessLevel From AccountTeamMember a

   4. 不能为这个对象创建Trigger.

3. Share:

    每个对象，都会一个对应的Share对象。

    Select w.UserOrGroupId, w.RowCause, w.ParentId, w.LastModifiedDate, w.LastModifiedById,     w.IsDeleted, w.Id, w.AccessLevel From Workflow_Activity__Share w

    ParentId:指定哪个对象的那条记录。

    AccessLevel:用户或者组对这条记录拥有的权限。

        a.Owner:创建这条记录的人。

        b.Read/Write:这条记录形式意义上的Owner,对此记录拥有修改和查看的权限。

        c.Read Only:对此记录只有查看的权限。

4.  Group:

本文出自 “prodigal_k” 博客，请务必保留此出处http://919637235.blog.51cto.com/7344598/1550368

SF ：Salesforce中，Rights Management