Salesforce user security is an intersection of sharing, user, Profiles, roles, roles hierarchy and object permissions.

learn more… | top users | synonyms

2
votes
2answers
26 views

SOQL Query: Stored XSS Error

I have given my code for Security code Scanner but it is given the following error due to Query: Stored XSS My query is like this. loan=Database.query('SELECT Name, fintechLLC__Application__c, ...
1
vote
2answers
26 views

Record sharing using lookup field criteria using apex (similar to controlled by parent)

We have a custom object that has a lookup to account (similar to Contact looking up to Account). We want the user who owns an account to see the records looking up to that account automatically ...
1
vote
1answer
12 views

Updating profiles with Managed Package update

We have several profiles in our managed package that specify access levels to different users. We continuously build new customer fields and objects and want to be able to update the profile with the ...
2
votes
1answer
38 views

Google is making a change to DMARC that affects Salesforce

If you took a looked into Salesforce-Outbound-Emails-Impacted-by-Google-DMARC-Policy I understood we can't use other gmail address to send email from salesforce instance. So as per my understanding ...
1
vote
0answers
22 views

Limited Admin or Delegated Admin profile in Salesforce

So this is the conundrum I am in, we are wanting to store HR sensitive information within salesforce such as salary info and SSN the issue is that we have part of our development team has admin access ...
1
vote
0answers
22 views

Dynamic Security?

I have a fairly complex app I'm building which currently has 24 custom objects, 20 of which fall into a Master-detail relationship at the moment but I think I'm going to have to change that. The ...
1
vote
2answers
20 views

How to solve salesforce security issue (From Zap scanning report)

I am getting " X-Frame-Options Header Not Set" issue in salesforce how I can solve this issue, I have attach a image please take a look on that image.
2
votes
0answers
26 views

invalid security token

Hi we were given an ExactTarget php application to port from an older Magento installation to a new Magento installation. This code is based on the ExactTargetSoapClient, soap-wsse.php and ...
0
votes
0answers
12 views

How could i give a user who tests the application access to login as user but not have access to setup and configuration.

The business users who tests applications today have administration access to login as different users and test as other users, this access is important, but we want to confine them to not have access ...
0
votes
1answer
26 views

Does assigning visualforce page to object buttons override the OWD

I have Opportunity OWD set to Private. Have over ridden the NEW,EDit,View and Clone buttons of Opportunity with VF page. I created opp record with USER1. Logged in as USER2 and still able to see ...
4
votes
0answers
30 views

Enable Apex Classes - Sometimes Only Global, Sometimes Includes Public

I have a managed package that I distribute to clients and I'm running into a curious situation trying to help one install. I have noticed that in the Enable Apex Classes for their System Administrator ...
1
vote
1answer
43 views

How to make pdf rendering non-editable or password protected

Although the question I am asking may sound stupid but i am trying to check the best possible secure solution. Is it possible to make pdf rendering non-editable or password protected
1
vote
0answers
51 views

SSL certificate problem: unable to get local issuer certificate, curl_errno 60

I'm trying to integrate PHP script with Salesforce by following the example on the link: http://developer.force.com/cookbook/recipe/interact-with-the-forcecom-rest-api-from-php But I get the error ...
1
vote
1answer
16 views

List view assigned to roles can't be seen by users with that role

I'm sure I'm overlooking something simple here. We have a list view on case where visibility is extended to a set of roles: However, when I login as a user with one of the defined roles, the UI ...
1
vote
0answers
19 views

Reduce the Permissions of User

I have Lead OWD set to public Read/Write. I m creating new User with new profile..with Lead permissions as CRED(No view All,Modify All). I want this user not to see other lead records. How to ...
1
vote
1answer
26 views

Need to change object permissions of standard profile-URGENT

I have Lead OWD set as Private. I have 5 users in Marketing User(std obj)..I need to give View All & Modify All permissions on lead object of this profile. How to approach.? Cloning marketing ...
1
vote
1answer
32 views

Field Audit Trail

Did anyone used Field Audit Trail to archive data in production? any experience/limitations with it? also is it part of standard licensees agreement or we need to buy something new like shield? ...
2
votes
1answer
30 views

Profile / Permissions best practices? [closed]

Hello and thank you in advance. I'm curious if anyone has any resources they could point me to for best practices around permissions sets / profiles / etc. The reason for this is because as an ...
1
vote
0answers
42 views

Marketing Cloud SQL Injection?

I had a question come up that seemed a bit ridiculous at first, but has got me wondering. Is it possible to run any sort of script or SQL injection equivalency on forms that are configured to direct ...
0
votes
4answers
106 views

how to skip verification code for a user in salesforce

I want to skip the verification code for a user I want the users not to receive the "''You recently logged in to Salesforce from a device we don't recognize.'' How can I do ? I have defined lists of ...
1
vote
1answer
35 views

Security Scan for remote site

Can you please help me running scan for a remote site setting. SFDC asked for chimera report for remote Site setting. eg. I have a remote site setting with URL as: https://abc.abc.com and which gets ...
2
votes
1answer
41 views

How to restrict visibility of account to an opportunity owner?

Transferring ownership of an account is quite common in the company. If we change the owner of an account, for historical reason, the opportunity owner should be maintain, and that's ok we can do ...
2
votes
1answer
27 views

Your user profile is not associated with this service

I've cloned a profile called Heathrow Portal which works fine when you want to log in onto the portal. But Now that I've created a profile for Atkins it comes up with the following error message : ...
0
votes
0answers
10 views

Google Authentication for existing (partner) community users

I'm wondering if I can use Google authentication for existing users. I think of having partner users who get their salesforce login data in a first step and later can choose to use their google ...
0
votes
0answers
23 views

Clickjacking prevention in Marketing Cloud

Salesforce Marketing Cloud users: Has anyone implemented a method to prevent unapproved domains from framing landing pages (especially smart capture forms)? Unfortunately the built-in Clickjacking ...
0
votes
0answers
32 views

Hide records and their lookup children between subordinates

I have a scenario where there is a Master Object-A and couple of child(lookup) objects-B,C,D,E related to the Master. I have some users in my system. I would like to set a security in such a way that ...
-1
votes
1answer
49 views

Hide a Lead in sfdc based on lead status

I got a requirement like want to hide leads in my org based on the lead status.i have a value in status field called customer.so,when user selects customer in status field the lead had to be hidden ...
3
votes
2answers
302 views

How do I skip the security question in Salesforce?

I had a user whose email address has been changed to another user. Now the new user gets an email to change the password along with the security question of the previous user. How can I prevent ...
0
votes
0answers
38 views

I have a user who should not be able to edit a record, but can. Sharing Settings shows that they have Read Only access

I have a user who should not be able to edit a record, but can. Sharing Settings shows that they have Read Only access. I have checked for profiles that override the sharings settings, and there are ...
1
vote
2answers
66 views

Can we still save/update production apex trigger code using API?

As we know we can update the production class using API. I am just trying to update one of my production trigger using eclipse. This is not getting saved instead it is showing other test class ...
2
votes
1answer
43 views

Permission Sets on Quotes Template

I would like to create a permission set to give an access to all quote templates. I do not want some users within the same profile to see or have access to the quotes template. How to user can only ...
0
votes
0answers
43 views

How to save the record as a specific user

I am logged in as a site user and have a scenario to update a record on the standard object. The site user doesnt have edit permissions on the object. So, is it possible to update the record as a ...
1
vote
0answers
45 views

Why Mavensmate Does not Work in Multiple Environments? [closed]

I want to use Mavensmate as it has a wonderful interface and more features than eclipse. But I am facing problem with opening it at multiple places. I installed it in my office, and now it is not ...
1
vote
0answers
56 views

Unable to execute a REST method from workbench

I am getting the following error when I make a request to a REST service. HTTP/1.1 500 Server Error Date: Wed, 17 Feb 2016 22:09:03 GMT Content-Security-Policy-Report-Only: default-src https:; ...
2
votes
1answer
110 views

Why is my salesforce org asking for security code every day?

When I am trying to log in with sandbox (or production) credentials, every day asking for a security code which I receive on my phone. This is happening even though I logged in to the same system ...
2
votes
0answers
29 views

Can public force.com sites be accessed from “restricted countries”

As from the summer 15 release, Salesforce started blocking users from logging in from "restricted countries" like Cuba and Iran. (http://trust.salesforce.com/trust/blocked) Does this also apply to ...
1
vote
1answer
18 views

Question on Security setup Accounts/Opportunities. Users read access to Account prevent from creating Opportuntiies?

I thought I had a pretty good handle on security in SF. Have received a requirement that I can't seem to meet with no code. Basically OWD - Accounts, Contacts and Opportunities are all Private. ...
0
votes
0answers
22 views

Password secured area with exacttarget

I want to create a bunch of microsites where contacts need to login with their credentials (Stored in Salesforce) to fill out surveys. Anyone ever done something like that? Best Practices?
0
votes
1answer
67 views

How Field level and object level security enforced in apex class? [closed]

As per the standard documentation provided by salesforce, the apex logics executes in system mode i.e. the field level security and object level securities are not respected. But, if any apex logic ...
2
votes
2answers
42 views

Unable to get the security token to my email id

I have reset the security token thrice. And I waited for 1 hour , to receive the email from salesforce. I have still not received the security token from Sales force.My org is Sandbox.
0
votes
0answers
20 views

Custom App Security Model

I have an app that has a number of custom objects that are linked with a master detail relationship model. The app needs to be generic as I won't know the security setup up front. The app is also ...
1
vote
0answers
29 views

Why isn't login forensics available on government pods?

Not that I work on a government pod, but I'm curious. I read this in the Spring'16 release notes. Why on earth would Salesforce keep this feature from a sys admin on a government pod? I'd like to know ...
0
votes
0answers
21 views

Login History. Get Mobile Device Id Values

I am using the following query to get the login history for users to identify if the user logged in using a mobile device or not. SELECT ...
1
vote
1answer
67 views

CRUD permission check Security Review with SOQL queries needed?

The CRUD permission check for Security Review has been imposed recently, though I'm clear on the DML statement and Create/Update/Delete permissions I need to check for in my code, but I'm not clear ...
1
vote
1answer
35 views

How can I restrict a profile's read access on an object if my org-wide default is public read-only?

My org has a default of public read-only on a certain object, but I want to set up a new profile that can only see certain records based on criteria. Is this even possible to do? If so, how?
0
votes
2answers
131 views

INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY: insufficient access rights on cross-reference id: []

I have a custom object Resource__c having master detail with Account object. I have Account1 created by User1 and if User2 goes to create resource on Account1 then below error is given ...
0
votes
2answers
99 views

Not seeing some custom objects and custom fields in Salesforce Workbench

We just promoted a changeset from a Developer Pro sandbox to a Full Copy sandbox. We're not seeing many of the promoted custom objects in workbench for either sandbox. We're not seeing most of the ...
9
votes
1answer
83 views

Is web to lead form data submits in encrypted form?

I want to know that when web to lead form is submitted into salesforce, if the data in that form is encrypted or not. I want to know that how much security is applied on web to lead? I want to ...
2
votes
3answers
562 views

Deployment of “Active Content” in Email

When I try to ant deploy ("Force.com Migration tool") to one of our sandboxes I get the following error message: email/folder/sometemplate.email -- Error: Your template contains active content, which ...
9
votes
2answers
156 views

Whitelist all IP/ Ray Dehler method does not work any longer

There are 2 parts to my question Traditionally, while developing and distributing Salesforce mobile apps for beta testing and feedback, I've used the Ray Dehler method for whitelisting all IP ...