Salesforce permissions are all about what a user can do in terms of Field Level Security, object level access, Apex class access, Visualforce page access, and other built in Salesforce access that are handled via a profile or permission set.

learn more… | top users | synonyms

1
vote
0answers
20 views

Limited Admin or Delegated Admin profile in Salesforce

So this is the conundrum I am in, we are wanting to store HR sensitive information within salesforce such as salary info and SSN the issue is that we have part of our development team has admin access ...
0
votes
1answer
13 views

How to restrict Marketing Users to view only Marketing Lead and Accounts and Opp converted from those leads?

I have Profile called as Marketing Profile. On Lead object, I have made a custom field as Record type. For Marketing users the lead created will be of record type Marketing. I want Marketing Users to ...
0
votes
0answers
18 views

Restrict record creation through field values & public groups

I've created an app which can be used to create new requests to be sent through an approval process for employees by their managers. The functionality works great but I am now trying to think of the ...
3
votes
0answers
27 views

Why Field Accessibility Check is broken in a Managed Package?

my code has a centralised class which is responsible for all DML operations. This class before inserting / updating / deleting a record is checking: 1, if the object is accessible for the current ...
2
votes
2answers
93 views

Is there a way to stop an user from seeing an object except when obtained by apex?

I have a community user profile that will have access to a series of visualforce pages, ids will be passed as parameters. Is there a way for the apex pages to be able to get the data for the user ...
0
votes
2answers
24 views

Users having read access for an Opportunity is not be able to attach a file in that Opportunity

Users having read access for an Opportunity are not be able to attach a file in that Opportunity. Kindly help me to accomplish this.
0
votes
1answer
19 views

Allowing users to insert (or create) an opportunity

I'm facing this error : OpportunityTrigger: execution of AfterInsert caused by: System.DmlException: Insert failed. First exception on row 0; first error: ...
1
vote
1answer
20 views

Query Object Access by Profile

I have looked at the documentation and it seems the best I can do is query ObjectPermissions for PermissionSet access. Is it possible to do the same for Profile instead of PermissionSet? THANKS FOR ...
1
vote
1answer
36 views

RemoteAction not respecting sharing settings

I have a RemoteAction in my code that queries data. I receive all the records irrespective of the fact that with sharing has been used for the containing class. Does RemoteAction NOT respect sharing ...
1
vote
1answer
28 views

Error Message- Standard tabsets are not permitted for this profile

I was able to resolve the below issue by googling it but couldn't able to understand whats wrong and how suggested method resolved the issue. Can someone please help me to get a better understanding ...
0
votes
0answers
9 views

“View Dashboards in Public Folders” profile permission is not available on Partner Developer edition

I noticed that the profile permission "View Dashboards in Public Folders" is not available on "Partner Developer edition" Salesforce org. However, this permission is available on "Developer Edition" ...
1
vote
1answer
19 views

Disallow Single Sign On for Specified Profile?

From Salesforce documentation: Do not enable Single Sign-On for the system administrator’s profile. If your system administrators were Single Sign-On users and your Single Sign-On server had ...
0
votes
0answers
16 views

How to show or hide a page based on profile in Communities

I am trying to learn about the Community Builder, and I see in the page editor we have page variations, and I can make a variant which will appear to users in a certain profile. What I would like to ...
4
votes
0answers
29 views

Enable Apex Classes - Sometimes Only Global, Sometimes Includes Public

I have a managed package that I distribute to clients and I'm running into a curious situation trying to help one install. I have noticed that in the Enable Apex Classes for their System Administrator ...
0
votes
0answers
29 views

Update failed: INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY, insufficient access rights on cross-reference id

I have three test classes in my org which are not executing. For those three classes I'm facing same error. After analyzed three classes I'm having same problem with account. When i comment the ...
1
vote
2answers
22 views

API Usage Last 7 Days report - Minimum Permission Needed to Run?

I am trying to create a reporting user. One of the reports the user will run is the API Usage Last 7 Days report. I want to minimize the access to as much as possible but it seems the user's profile ...
3
votes
1answer
59 views

Getting User - List View mapping using apex

Is there any table or any other way(metadata/rest api) we can query the list views of a particular object that a user/group has access. Example: SELECT Name FROM table_x WHERE UserOrGroupId = ...
0
votes
0answers
7 views

Profile 'API only' permission not available on Developer edition

I have a developer edition and when I search for 'API only' permission on profile, it is not available. For which Salesforce org edition 'API only' permission is available? or Do I have to contact ...
2
votes
1answer
30 views

Profile / Permissions best practices? [closed]

Hello and thank you in advance. I'm curious if anyone has any resources they could point me to for best practices around permissions sets / profiles / etc. The reason for this is because as an ...
3
votes
1answer
67 views

Attempt to de-reference a null object on when calling Schema.getGlobalDescribe().get(sObjName).getDescribe();

I receive an error on a web page : Attempt to de-reference a null object Schema.DescribeSObjectResult sObjResult = GLOBAL_DESCRIBE.get(sObjName).getDescribe(); First i thought that my user doesn't ...
2
votes
1answer
19 views

What do Profiles do uniquely?

After becoming frustrated with the half-dozen Profiles that all do the same thing (except for subtle differences here and there), I have started on cleaning up my org's permissions scheme. My basic ...
0
votes
1answer
35 views

For a specific Role (or Profile or User) restrict access to certain Leads & Contacts based on field value

I am working on a Marketo-Salesforce sync. Marketo accesses Salesforce via a Salesforce User named 'Marketo User'. This User can have it's own Role, Profile, Permissions, etc. - it's sole purpose is ...
1
vote
0answers
28 views

Get the number of Opportunities for each User in the org (the count must include the records to which the User has atleast read access)

I need to get the count of Opportunity record for every User in the org where the User has atleast read access on the Opportunity record. I need to store the data obtained per User for every month in ...
0
votes
2answers
48 views

Unable to restrict delete permissions on Opportunity Line Items

I am trying to restrict users by profile from being able to delete opp line itmes. For example I have a communities partner profile and under the standard object permissions against the opportunity ...
2
votes
1answer
34 views

Insufficient Privileges to create a sandbox

You do not have the level of access necessary to perform the operation you requested. Please contact the owner of the record or your administrator if access is necessary. For more information, see ...
3
votes
1answer
44 views

Better way for Bulk Assignment of Field Level Security

In Salesforce we have a custom object which has 500 fields. We have around 50 different profiles in our org. Out of this 50 profiles, 30 profiles need access to these fields. Right now, to set field ...
2
votes
1answer
43 views

Permission Sets on Quotes Template

I would like to create a permission set to give an access to all quote templates. I do not want some users within the same profile to see or have access to the quotes template. How to user can only ...
4
votes
1answer
91 views

Articles not visible to Salesforce Community members

We have a private Salesforce Community built on Spring 16 Napili community template. Regular community members are not able to see articles. We followed the steps from this question for the custom ...
6
votes
2answers
93 views

Accessing Chatter API in Communities

I'm Having trouble accessing the Chatter API in the context of a community. Mainly, we have a certain type of user that only has access as a user of a SalesForce community we are using to act as an ...
0
votes
1answer
17 views

Way to hide one users records from search results, but still have the records viewable by all?

We are batch importing a lot of data into multiple objects and once in SF we are going to de-dupe it. I would like to have the data available to all to access but just leave it out of search results. ...
0
votes
2answers
21 views

Record access during Manual sharing

This might sound very basic but I was not able to find the right documentation for this. Suppose I have a record whose Owner is X. Once X fills out the record and saves it, the record type changes ...
4
votes
2answers
117 views

Can I modify object-level security via APEX?

I know we can share records programmatically via Apex. We can also check CRUD permissions on an object. But, can we use Apex to modify object-level CRUD permissions? I don't think so (as this would ...
0
votes
0answers
9 views

Can't deploy new CustomPermission with new reference to it

I thoroughly searched for this topic in multiple places and found nothing. Has anyone else experienced this? I want to create a new Custom Permission and reference it in a formula field on ...
2
votes
0answers
27 views

Give internal users access to the customer portal by default?

By default, the customer portal is accessed via portal user accounts. Salesforce internal users have a separate, non-portal contact for logging into Salesforce via a standard SF splash page. To ...
0
votes
1answer
38 views

Entity is not api accessible - Group Object

When installing my managed package into a test org I get the following error: System.NoAccessException: Entity is not api accessible This error is coming when accessing a map with the following ...
2
votes
2answers
50 views

How to query users who have access to a particular record?

I have been going through the forums and the documentation and I do not find a way to query the Users who have access to a particular record. For example, when I upload a document, a mail has to be ...
0
votes
0answers
9 views

Adding Permissions to a Managed Package Already in the Field

I have a Managed Package that recently failed a security review due lacking permission checks for Dynamic/Standard SOQL (see Dynamic SOQL permission checks & Managed Packages). For now, I'd ...
1
vote
1answer
67 views

CRUD permission check Security Review with SOQL queries needed?

The CRUD permission check for Security Review has been imposed recently, though I'm clear on the DML statement and Create/Update/Delete permissions I need to check for in my code, but I'm not clear ...
0
votes
1answer
27 views

User Permissions for Sharing Reports and Dashboards

I want to give specific profiles in my organization the ability to modify and use Dynamic Dashboards. According to this Salesforce Help Page, I need to give the following permissions to the ...
4
votes
0answers
14 views

CRUD/FLS Checks on CronTrigger

I've recently had an app fail the security review due to lack of CRUD/FLS checks on dynamic/static SOQL. These queries against CronTrigger were some of the things flagged: 24 Integer count = ...
0
votes
1answer
17 views

Opportunity Access with Community Roles

I want to set up the following scenario: Manager A User A1 Opportunity 1 Opportunity 2 User A2 Opportunity 3 Opportunity 4 Manager B User B1 Opportunity 5 Opportunity 6 ...
0
votes
0answers
38 views

WebServiceCallout exception

I'm trying to call an external web service from my org. I have to use a user name and password to retrieve the information. I have created a named credential with my path, user and pass, but when I ...
1
vote
1answer
39 views

Dynamic SOQL permission checks & Managed Packages

I recently had an app fail the security review because I didn't check CRUS/FLS permissions for dynamic SOQL queries. To "fix", I've created a few functions that check the appropriate permission for ...
1
vote
1answer
46 views

Unable to Deploy file-based Custom Field / Profile Settings to Salesforce SOAP API

We've visited the following link, and followed the examples/instructions to no avail. https://developer.salesforce.com/forums/?id=906F0000000AVifIAG We originally utilized the CRUD-based SOAP API to ...
2
votes
1answer
75 views

State of the Art to leverage Permission (Set)s in ISV applications

Now that we have Permission Sets and Custom Permissions in Salesforce ISVs could package fine-grained permission structures with their applications. As always with great power comes great ...
1
vote
0answers
25 views

Will I need more than one community if I want to hide Chatter posts from anonymous users?

We are setting up a Salesforce Community, where the public will have access to certain articles as defined by data categories, and logged-in users will have access to additional articles and the ...
0
votes
2answers
99 views

Not seeing some custom objects and custom fields in Salesforce Workbench

We just promoted a changeset from a Developer Pro sandbox to a Full Copy sandbox. We're not seeing many of the promoted custom objects in workbench for either sandbox. We're not seeing most of the ...
3
votes
1answer
63 views

What are the minimum permissions required to update an object record via the Metadata API?

I have a set of custom objects in a managed package that I need to be able to update records on via the Metadata API in my customer's orgs (yeah, I know this is not a good way of doing it, but I'm ...
2
votes
1answer
33 views

Create Child Record without modify all Data permission

need suggestion for below query, i have two object with master detail relation(Object A is Parent, Object B is Child) in one of my profile i have Object A is only Read access,and want to create ...
3
votes
1answer
45 views

What permissions are necessary for a Guest (Sandbox) User to see a Salesforce Site?

I've got a Site that works as expected when I'm logged in, but I get this error as Guest User: Error during init : Component class not found: markup://aura:integrationServiceApp I understand that I ...