Salesforce permissions are all about what a user can do in terms of Field Level Security, object level access, Apex class access, Visualforce page access, and other built in Salesforce access that are handled via a profile or permission set.

learn more… | top users | synonyms

4
votes
2answers
67 views

Can I modify object-level security via APEX?

I know we can share records programmatically via Apex. We can also check CRUD permissions on an object. But, can we use Apex to modify object-level CRUD permissions? I don't think so (as this would ...
0
votes
0answers
3 views

Can't deploy new CustomPermission with new reference to it

I thoroughly searched for this topic in multiple places and found nothing. Has anyone else experienced this? I want to create a new Custom Permission and reference it in a formula field on ...
1
vote
0answers
8 views

Give internal users access to the customer portal by default?

By default, the customer portal is accessed via portal user accounts. Salesforce internal users have a separate, non-portal contact for logging into Salesforce via a standard SF splash page. To ...
0
votes
1answer
17 views

Entity is not api accessible - Group Object

When installing my managed package into a test org I get the following error: System.NoAccessException: Entity is not api accessible This error is coming when accessing a map with the following ...
2
votes
2answers
33 views

How to query users who have access to a particular record?

I have been going through the forums and the documentation and I do not find a way to query the Users who have access to a particular record. For example, when I upload a document, a mail has to be ...
0
votes
0answers
6 views

Adding Permissions to a Managed Package Already in the Field

I have a Managed Package that recently failed a security review due lacking permission checks for Dynamic/Standard SOQL (see Dynamic SOQL permission checks & Managed Packages). For now, I'd ...
1
vote
1answer
30 views

CRUD permission check Security Review with SOQL queries needed?

The CRUD permission check for Security Review has been imposed recently, though I'm clear on the DML statement and Create/Update/Delete permissions I need to check for in my code, but I'm not clear ...
0
votes
1answer
20 views

User Permissions for Sharing Reports and Dashboards

I want to give specific profiles in my organization the ability to modify and use Dynamic Dashboards. According to this Salesforce Help Page, I need to give the following permissions to the ...
3
votes
0answers
9 views

CRUD/FLS Checks on CronTrigger

I've recently had an app fail the security review due to lack of CRUD/FLS checks on dynamic/static SOQL. These queries against CronTrigger were some of the things flagged: 24 Integer count = ...
0
votes
1answer
10 views

Opportunity Access with Community Roles

I want to set up the following scenario: Manager A User A1 Opportunity 1 Opportunity 2 User A2 Opportunity 3 Opportunity 4 Manager B User B1 Opportunity 5 Opportunity 6 ...
0
votes
0answers
25 views

WebServiceCallout exception

I'm trying to call an external web service from my org. I have to use a user name and password to retrieve the information. I have created a named credential with my path, user and pass, but when I ...
1
vote
1answer
27 views

Dynamic SOQL permission checks & Managed Packages

I recently had an app fail the security review because I didn't check CRUS/FLS permissions for dynamic SOQL queries. To "fix", I've created a few functions that check the appropriate permission for ...
1
vote
0answers
24 views

Unable to Deploy file-based Custom Field / Profile Settings to Salesforce SOAP API

We've visited the following link, and followed the examples/instructions to no avail. https://developer.salesforce.com/forums/?id=906F0000000AVifIAG We originally utilized the CRUD-based SOAP API to ...
2
votes
1answer
71 views

State of the Art to leverage Permission (Set)s in ISV applications

Now that we have Permission Sets and Custom Permissions in Salesforce ISVs could package fine-grained permission structures with their applications. As always with great power comes great ...
1
vote
0answers
19 views

Will I need more than one community if I want to hide Chatter posts from anonymous users?

We are setting up a Salesforce Community, where the public will have access to certain articles as defined by data categories, and logged-in users will have access to additional articles and the ...
0
votes
2answers
17 views

Not seeing some custom objects and custom fields in Salesforce Workbench

We just promoted a changeset from a Developer Pro sandbox to a Full Copy sandbox. We're not seeing many of the promoted custom objects in workbench for either sandbox. We're not seeing most of the ...
3
votes
1answer
32 views

What are the minimum permissions required to update an object record via the Metadata API?

I have a set of custom objects in a managed package that I need to be able to update records on via the Metadata API in my customer's orgs (yeah, I know this is not a good way of doing it, but I'm ...
2
votes
0answers
28 views

Create Child Record without modify all Data permission

need suggestion for below query, i have two object with master detail relation(Object A is Parent, Object B is Child) in one of my profile i have Object A is only Read access,and want to create ...
3
votes
1answer
35 views

What permissions are necessary for a Guest (Sandbox) User to see a Salesforce Site?

I've got a Site that works as expected when I'm logged in, but I get this error as Guest User: Error during init : Component class not found: markup://aura:integrationServiceApp I understand that I ...
0
votes
2answers
18 views

Is it possible to create a publicly viewable dashboard?

I understand how to make a dashboard "public". But public seems to mean visible to other members of the Salesforce organization? I would like to make a report viewable by anyone without logging into ...
1
vote
2answers
40 views

Is it a must to have the source profile in target organisation prior to deployment

I deployed number of profiles to a new sandbox environment via a change-set, but what I can see is, all of the profiles I added to the change-set are NOT deployed properly, (most of the profiles are ...
1
vote
1answer
25 views

User access to an Object

I am a new salesforce admin and I am assigned with a task to give a user access to an Object so that he can create records. The user profile has Modify all access to the object and can see all the ...
3
votes
1answer
29 views

Is it possible to query the Security Permissions on a Apex Class via SOQL?

I wish to know how many apex classes does a particular profile have permissions to execute. Is there any way to write a SOQL query to get this information? We are in process of setting up a community ...
0
votes
1answer
25 views

Private org wide setting and Duplicates

I need Sales reps to be able to see or search for accounts/contacts owned by other reps before they create new ones or convert a lead. Problem is our Org wide security setting is set to Private and ...
0
votes
0answers
12 views

Restrict app permissions to reading Contacts only

We have a Rails application where the users are authenticated with the Devise gem. We want to add a feature "invite your contact" so the user can select the contacts from his Salesforce and send an ...
1
vote
0answers
19 views

How to allow community users to modify their contacts without seeing other contacts

We have a customer community using custom apex controllers that look up and modify the community user's associated contact (based off User.ContactId). I'd like to set the permissions for the community ...
0
votes
1answer
28 views

SOQL to find which reports are accesed by what profile?

How can I extract by means of soql or exchange app, which users or profiles, have access to which report folders?
0
votes
2answers
13 views

Keep users from changing field but allow batch apex to edit it

I have a field that I want to display on a Contact record however I do not want users to modify this value. The catch is that I have a batch apex job that is updating this field periodically to keep ...
0
votes
1answer
35 views

Making fields visible only in ListView

I am having a hard time accomplishing this. My requirement is to have Account object private but i need few fields from accounts to be visible in the account list view for all users such as Account ...
5
votes
1answer
54 views

How To Cause DmlException - Delete

I thought I would be able to take a User who does not have delete privileges on an object, delete records from that object, and get a DmlException. No dice. Below are the Case permissions for the ...
1
vote
1answer
27 views

How to modify CRUD permission on an object programmatically?

I want to modify CRUD permissions for a custom object inside my Visualforce page controller (accessible only by administrators) in order to hide/show this object to other users when clicking on a ...
0
votes
0answers
8 views

Retrieve App and Tab permissions from Profile in Apex without using Metadata Classes

I am looking for a way to retrieve App and Tab permissions from Profile in Apex. However, I do not want to do that with Metadata classes. Is there any way we can do this? Thanks in advance.
1
vote
0answers
13 views

Grant different access to documents folder for different groups

I have a document folder and two user groups that need different access for them: one of the groups should be able to create documents in the folder, the other group should be able to read documents ...
2
votes
1answer
31 views

Profile permissions to deploy from sandbox to production in sales force using Change sets

I need to deploy apex classes, triggers,objects, customization and visualforce pages from sandbox to production organization using change sets. What Profile need to clone to create a custom profile ...
2
votes
0answers
21 views

Restricting API access to custom webservice

Is it possible to give a 3rd party application access to a custom webservice without giving them access to the standard API? To give a little background on my project. Users will use their ...
0
votes
1answer
20 views

Why do I need create permission to open page in edit mode?

I checked the profile settings. User has access to all fields and read access to object. The page block has mode attribute set to edit but the page doesn't render input fields unless I add Create ...
2
votes
1answer
51 views

Can a trigger populate the Manager on User records from a custom field?

We've delegated User creation and Administration to helpdesk staff, but the delegated Admins cannot populate the Manager field because only someone with edit all data can populate that field. Is it ...
1
vote
1answer
36 views

SOQL List Reports Current User Can Access

I have the following SOQL query: SELECT Id, Name, Format, FolderName, LastModifiedDate FROM Report ORDER BY FolderName, Name Which I am executing using this endpoint of the REST API: ...
0
votes
1answer
315 views

system.security.NoAccessException: Update access denied for RecordType

I have a Visualforce Page that uses a standard controller (Opportunity) and an extension. In the extension I have a method that saves updates to the opportunity and a related contact. The extension is ...
0
votes
2answers
105 views

Deployment Failed: profiles/Admin.profile — Error: Unknown user permission: LightningExperienceUser

In Winter '16, Salesforce rolled out the Lightning Experience. This can be optionally enabled for particular profiles. Initially this is not available for orgs that are using person accounts. ...
1
vote
1answer
95 views

System Admin is API user only, no security token

While trying to figure out a way to set a security token for an organization today, I was going through profile settings and accidentally selected API only user and was kicked out of Salesforce with ...
1
vote
0answers
17 views

User-level access to the FieldPermissions object

Is it possible to give individual users read-only access to the FieldPermissions object? Right now, as an admin, I am able to query the object: SELECT Field, PermissionsRead, PermissionsEdit, ...
1
vote
1answer
46 views

how to analyze salesforce profiles, roles and permission set?

An org with 600+ users, 500+ roles and 70 profiles. my job is clean up the role and profile in system manner. to be specific, I need to analyze each profile and role to understand and compare similar ...
0
votes
1answer
18 views

Is there a way to let a manager use the “log in as another user” permission, but only as their own subordinates in the role hierarchy?

I have been scaling back system permissions across many non-admin profiles in our org, but one manager has complained that he needs to be able to log in as his reps in order to troubleshoot various ...
0
votes
0answers
39 views

Apex code to update field permission set

i'm trying to update Field permission from apex code where opportunity Field permission in my permission set with id 0PS280000001nGv are to be updated.here i was able to update object permissions but ...
1
vote
1answer
17 views

Access to Set Up Menu

Can someone tell me what permission/profile setting determines whether that person will be able to navigate to "Set up" page or not ? Surprisingly I am unable to find answer to this in a simple ...
2
votes
2answers
79 views

Setting permission to write apex classes

I am working on a visual force page, and have reached a point where I need a custom controller to accomplish what I want. When I open up the developer console, and attempt to "open execute anonymous ...
1
vote
2answers
103 views

Ho to install the Lightning Component “Filter List - View and sort records from standard and custom objects” from AppExchange

I'm trying to install this free component provided by Salesforce https://appexchange.salesforce.com/listingDetail?listingId=a0N30000000qD5VEAU into a brand new Developer Org (Partner Developer ...
0
votes
0answers
24 views

Custom Related List for AppExchange App shows up only for System Administrator profile

I have a AppExchange package which contains a custom object related to the Salesforce object - Leads. This custom object will be configured as a Related List by the Salesforce Administrator after ...
2
votes
1answer
31 views

UserRecordAccess data dump

My application replicates data from Salesforce to my local disk. Initially, the admin downloads the entire dump. The other users will be able to access the entire dump. However, I wanted to enforce ...