Salesforce permissions are all about what a user can do in terms of Field Level Security, object level access, Apex class access, Visualforce page access, and other built in Salesforce access that are handled via a profile or permission set.

learn more… | top users | synonyms

0
votes
0answers
19 views

Update failed: INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY, insufficient access rights on cross-reference id

I have three test classes in my org which are not executing. For those three classes I'm facing same error. After analyzed three classes I'm having same problem with account. When i comment the ...
1
vote
2answers
16 views

API Usage Last 7 Days report - Minimum Permission Needed to Run?

I am trying to create a reporting user. One of the reports the user will run is the API Usage Last 7 Days report. I want to minimize the access to as much as possible but it seems the user's profile ...
3
votes
1answer
36 views

Getting User - List View mapping using apex

Is there any table or any other way(metadata/rest api) we can query the list views of a particular object that a user/group has access. Example: SELECT Name FROM table_x WHERE UserOrGroupId = ...
0
votes
0answers
5 views

Profile 'API only' permission not available on Developer edition

I have a developer edition and when I search for 'API only' permission on profile, it is not available. For which Salesforce org edition 'API only' permission is available? or Do I have to contact ...
2
votes
1answer
29 views

Profile / Permissions best practices? [closed]

Hello and thank you in advance. I'm curious if anyone has any resources they could point me to for best practices around permissions sets / profiles / etc. The reason for this is because as an ...
3
votes
1answer
65 views

Attempt to de-reference a null object on when calling Schema.getGlobalDescribe().get(sObjName).getDescribe();

I receive an error on a web page : Attempt to de-reference a null object Schema.DescribeSObjectResult sObjResult = GLOBAL_DESCRIBE.get(sObjName).getDescribe(); First i thought that my user doesn't ...
2
votes
1answer
19 views

What do Profiles do uniquely?

After becoming frustrated with the half-dozen Profiles that all do the same thing (except for subtle differences here and there), I have started on cleaning up my org's permissions scheme. My basic ...
0
votes
1answer
25 views

For a specific Role (or Profile or User) restrict access to certain Leads & Contacts based on field value

I am working on a Marketo-Salesforce sync. Marketo accesses Salesforce via a Salesforce User named 'Marketo User'. This User can have it's own Role, Profile, Permissions, etc. - it's sole purpose is ...
1
vote
0answers
28 views

Get the number of Opportunities for each User in the org (the count must include the records to which the User has atleast read access)

I need to get the count of Opportunity record for every User in the org where the User has atleast read access on the Opportunity record. I need to store the data obtained per User for every month in ...
0
votes
2answers
36 views

Unable to restrict delete permissions on Opportunity Line Items

I am trying to restrict users by profile from being able to delete opp line itmes. For example I have a communities partner profile and under the standard object permissions against the opportunity ...
2
votes
1answer
33 views

Insufficient Privileges to create a sandbox

You do not have the level of access necessary to perform the operation you requested. Please contact the owner of the record or your administrator if access is necessary. For more information, see ...
3
votes
1answer
41 views

Better way for Bulk Assignment of Field Level Security

In Salesforce we have a custom object which has 500 fields. We have around 50 different profiles in our org. Out of this 50 profiles, 30 profiles need access to these fields. Right now, to set field ...
2
votes
1answer
38 views

Permission Sets on Quotes Template

I would like to create a permission set to give an access to all quote templates. I do not want some users within the same profile to see or have access to the quotes template. How to user can only ...
4
votes
1answer
72 views

Articles not visible to Salesforce Community members

We have a private Salesforce Community built on Spring 16 Napili community template. Regular community members are not able to see articles. We followed the steps from this question for the custom ...
6
votes
2answers
88 views

Accessing Chatter API in Communities

I'm Having trouble accessing the Chatter API in the context of a community. Mainly, we have a certain type of user that only has access as a user of a SalesForce community we are using to act as an ...
0
votes
1answer
16 views

Way to hide one users records from search results, but still have the records viewable by all?

We are batch importing a lot of data into multiple objects and once in SF we are going to de-dupe it. I would like to have the data available to all to access but just leave it out of search results. ...
0
votes
2answers
19 views

Record access during Manual sharing

This might sound very basic but I was not able to find the right documentation for this. Suppose I have a record whose Owner is X. Once X fills out the record and saves it, the record type changes ...
4
votes
2answers
113 views

Can I modify object-level security via APEX?

I know we can share records programmatically via Apex. We can also check CRUD permissions on an object. But, can we use Apex to modify object-level CRUD permissions? I don't think so (as this would ...
0
votes
0answers
9 views

Can't deploy new CustomPermission with new reference to it

I thoroughly searched for this topic in multiple places and found nothing. Has anyone else experienced this? I want to create a new Custom Permission and reference it in a formula field on ...
2
votes
0answers
19 views

Give internal users access to the customer portal by default?

By default, the customer portal is accessed via portal user accounts. Salesforce internal users have a separate, non-portal contact for logging into Salesforce via a standard SF splash page. To ...
0
votes
1answer
31 views

Entity is not api accessible - Group Object

When installing my managed package into a test org I get the following error: System.NoAccessException: Entity is not api accessible This error is coming when accessing a map with the following ...
2
votes
2answers
46 views

How to query users who have access to a particular record?

I have been going through the forums and the documentation and I do not find a way to query the Users who have access to a particular record. For example, when I upload a document, a mail has to be ...
0
votes
0answers
9 views

Adding Permissions to a Managed Package Already in the Field

I have a Managed Package that recently failed a security review due lacking permission checks for Dynamic/Standard SOQL (see Dynamic SOQL permission checks & Managed Packages). For now, I'd ...
1
vote
1answer
64 views

CRUD permission check Security Review with SOQL queries needed?

The CRUD permission check for Security Review has been imposed recently, though I'm clear on the DML statement and Create/Update/Delete permissions I need to check for in my code, but I'm not clear ...
0
votes
1answer
25 views

User Permissions for Sharing Reports and Dashboards

I want to give specific profiles in my organization the ability to modify and use Dynamic Dashboards. According to this Salesforce Help Page, I need to give the following permissions to the ...
4
votes
0answers
14 views

CRUD/FLS Checks on CronTrigger

I've recently had an app fail the security review due to lack of CRUD/FLS checks on dynamic/static SOQL. These queries against CronTrigger were some of the things flagged: 24 Integer count = ...
0
votes
1answer
17 views

Opportunity Access with Community Roles

I want to set up the following scenario: Manager A User A1 Opportunity 1 Opportunity 2 User A2 Opportunity 3 Opportunity 4 Manager B User B1 Opportunity 5 Opportunity 6 ...
0
votes
0answers
37 views

WebServiceCallout exception

I'm trying to call an external web service from my org. I have to use a user name and password to retrieve the information. I have created a named credential with my path, user and pass, but when I ...
1
vote
1answer
36 views

Dynamic SOQL permission checks & Managed Packages

I recently had an app fail the security review because I didn't check CRUS/FLS permissions for dynamic SOQL queries. To "fix", I've created a few functions that check the appropriate permission for ...
1
vote
1answer
42 views

Unable to Deploy file-based Custom Field / Profile Settings to Salesforce SOAP API

We've visited the following link, and followed the examples/instructions to no avail. https://developer.salesforce.com/forums/?id=906F0000000AVifIAG We originally utilized the CRUD-based SOAP API to ...
2
votes
1answer
73 views

State of the Art to leverage Permission (Set)s in ISV applications

Now that we have Permission Sets and Custom Permissions in Salesforce ISVs could package fine-grained permission structures with their applications. As always with great power comes great ...
1
vote
0answers
24 views

Will I need more than one community if I want to hide Chatter posts from anonymous users?

We are setting up a Salesforce Community, where the public will have access to certain articles as defined by data categories, and logged-in users will have access to additional articles and the ...
0
votes
2answers
59 views

Not seeing some custom objects and custom fields in Salesforce Workbench

We just promoted a changeset from a Developer Pro sandbox to a Full Copy sandbox. We're not seeing many of the promoted custom objects in workbench for either sandbox. We're not seeing most of the ...
3
votes
1answer
51 views

What are the minimum permissions required to update an object record via the Metadata API?

I have a set of custom objects in a managed package that I need to be able to update records on via the Metadata API in my customer's orgs (yeah, I know this is not a good way of doing it, but I'm ...
2
votes
1answer
33 views

Create Child Record without modify all Data permission

need suggestion for below query, i have two object with master detail relation(Object A is Parent, Object B is Child) in one of my profile i have Object A is only Read access,and want to create ...
3
votes
1answer
45 views

What permissions are necessary for a Guest (Sandbox) User to see a Salesforce Site?

I've got a Site that works as expected when I'm logged in, but I get this error as Guest User: Error during init : Component class not found: markup://aura:integrationServiceApp I understand that I ...
0
votes
2answers
24 views

Is it possible to create a publicly viewable dashboard?

I understand how to make a dashboard "public". But public seems to mean visible to other members of the Salesforce organization? I would like to make a report viewable by anyone without logging into ...
1
vote
2answers
46 views

Is it a must to have the source profile in target organisation prior to deployment

I deployed number of profiles to a new sandbox environment via a change-set, but what I can see is, all of the profiles I added to the change-set are NOT deployed properly, (most of the profiles are ...
1
vote
1answer
29 views

User access to an Object

I am a new salesforce admin and I am assigned with a task to give a user access to an Object so that he can create records. The user profile has Modify all access to the object and can see all the ...
3
votes
1answer
47 views

Is it possible to query the Security Permissions on a Apex Class via SOQL?

I wish to know how many apex classes does a particular profile have permissions to execute. Is there any way to write a SOQL query to get this information? We are in process of setting up a community ...
0
votes
1answer
35 views

Private org wide setting and Duplicates

I need Sales reps to be able to see or search for accounts/contacts owned by other reps before they create new ones or convert a lead. Problem is our Org wide security setting is set to Private and ...
0
votes
0answers
15 views

Restrict app permissions to reading Contacts only

We have a Rails application where the users are authenticated with the Devise gem. We want to add a feature "invite your contact" so the user can select the contacts from his Salesforce and send an ...
1
vote
0answers
26 views

How to allow community users to modify their contacts without seeing other contacts

We have a customer community using custom apex controllers that look up and modify the community user's associated contact (based off User.ContactId). I'd like to set the permissions for the community ...
0
votes
1answer
46 views

SOQL to find which reports are accesed by what profile?

How can I extract by means of soql or exchange app, which users or profiles, have access to which report folders?
1
vote
2answers
27 views

Keep users from changing field but allow batch apex to edit it

I have a field that I want to display on a Contact record however I do not want users to modify this value. The catch is that I have a batch apex job that is updating this field periodically to keep ...
0
votes
1answer
38 views

Making fields visible only in ListView

I am having a hard time accomplishing this. My requirement is to have Account object private but i need few fields from accounts to be visible in the account list view for all users such as Account ...
5
votes
1answer
91 views

How To Cause DmlException - Delete

I thought I would be able to take a User who does not have delete privileges on an object, delete records from that object, and get a DmlException. No dice. Below are the Case permissions for the ...
1
vote
1answer
55 views

How to modify CRUD permission on an object programmatically?

I want to modify CRUD permissions for a custom object inside my Visualforce page controller (accessible only by administrators) in order to hide/show this object to other users when clicking on a ...
0
votes
0answers
12 views

Retrieve App and Tab permissions from Profile in Apex without using Metadata Classes

I am looking for a way to retrieve App and Tab permissions from Profile in Apex. However, I do not want to do that with Metadata classes. Is there any way we can do this? Thanks in advance.
1
vote
0answers
15 views

Grant different access to documents folder for different groups

I have a document folder and two user groups that need different access for them: one of the groups should be able to create documents in the folder, the other group should be able to read documents ...