Salesforce user security is an intersection of sharing, user, Profiles, roles, roles hierarchy and object permissions.

learn more… | top users | synonyms

1
vote
1answer
29 views

How to make pdf rendering non-editable or password protected

Although the question I am asking may sound stupid but i am trying to check the best possible secure solution. Is it possible to make pdf rendering non-editable or password protected
1
vote
0answers
25 views

SSL certificate problem: unable to get local issuer certificate, curl_errno 60

I'm trying to integrate PHP script with Salesforce by following the example on the link: http://developer.force.com/cookbook/recipe/interact-with-the-forcecom-rest-api-from-php But I get the error ...
0
votes
0answers
13 views

what is required from security perspective for Salesforce implementation for bank [closed]

I have a general question related to salesforce implementation for bank. May I know what are the things we need to consider and follow from security perspective in integration and configurations.
1
vote
1answer
13 views

List view assigned to roles can't be seen by users with that role

I'm sure I'm overlooking something simple here. We have a list view on case where visibility is extended to a set of roles: However, when I login as a user with one of the defined roles, the UI ...
0
votes
0answers
11 views

Assign user to public group based on profile in salesforce [closed]

Assign user to public group based on profile in salesforce..This needs to be done without Apex n VisualWorkflow... any suggestions will be helpful
1
vote
0answers
18 views

Reduce the Permissions of User

I have Lead OWD set to public Read/Write. I m creating new User with new profile..with Lead permissions as CRED(No view All,Modify All). I want this user not to see other lead records. How to ...
1
vote
1answer
23 views

Need to change object permissions of standard profile-URGENT

I have Lead OWD set as Private. I have 5 users in Marketing User(std obj)..I need to give View All & Modify All permissions on lead object of this profile. How to approach.? Cloning marketing ...
1
vote
1answer
22 views

Field Audit Trail

Did anyone used Field Audit Trail to archive data in production? any experience/limitations with it? also is it part of standard licensees agreement or we need to buy something new like shield? ...
2
votes
1answer
28 views

Profile / Permissions best practices? [closed]

Hello and thank you in advance. I'm curious if anyone has any resources they could point me to for best practices around permissions sets / profiles / etc. The reason for this is because as an ...
1
vote
0answers
29 views

Marketing Cloud SQL Injection?

I had a question come up that seemed a bit ridiculous at first, but has got me wondering. Is it possible to run any sort of script or SQL injection equivalency on forms that are configured to direct ...
0
votes
4answers
76 views

how to skip verification code for a user in salesforce

I want to skip the verification code for a user I want the users not to receive the "''You recently logged in to Salesforce from a device we don't recognize.'' How can I do ? I have defined lists of ...
1
vote
1answer
32 views

Security Scan for remote site

Can you please help me running scan for a remote site setting. SFDC asked for chimera report for remote Site setting. eg. I have a remote site setting with URL as: https://abc.abc.com and which gets ...
2
votes
1answer
24 views

How to restrict visibility of account to an opportunity owner?

Transferring ownership of an account is quite common in the company. If we change the owner of an account, for historical reason, the opportunity owner should be maintain, and that's ok we can do ...
2
votes
1answer
26 views

Your user profile is not associated with this service

I've cloned a profile called Heathrow Portal which works fine when you want to log in onto the portal. But Now that I've created a profile for Atkins it comes up with the following error message : ...
0
votes
0answers
8 views

Google Authentication for existing (partner) community users

I'm wondering if I can use Google authentication for existing users. I think of having partner users who get their salesforce login data in a first step and later can choose to use their google ...
0
votes
0answers
18 views

Clickjacking prevention in Marketing Cloud

Salesforce Marketing Cloud users: Has anyone implemented a method to prevent unapproved domains from framing landing pages (especially smart capture forms)? Unfortunately the built-in Clickjacking ...
0
votes
0answers
28 views

Hide records and their lookup children between subordinates

I have a scenario where there is a Master Object-A and couple of child(lookup) objects-B,C,D,E related to the Master. I have some users in my system. I would like to set a security in such a way that ...
-1
votes
1answer
46 views

Hide a Lead in sfdc based on lead status

I got a requirement like want to hide leads in my org based on the lead status.i have a value in status field called customer.so,when user selects customer in status field the lead had to be hidden ...
3
votes
2answers
280 views

How do I skip the security question in Salesforce?

I had a user whose email address has been changed to another user. Now the new user gets an email to change the password along with the security question of the previous user. How can I prevent ...
0
votes
0answers
38 views

I have a user who should not be able to edit a record, but can. Sharing Settings shows that they have Read Only access

I have a user who should not be able to edit a record, but can. Sharing Settings shows that they have Read Only access. I have checked for profiles that override the sharings settings, and there are ...
1
vote
2answers
60 views

Can we still save/update production apex trigger code using API?

As we know we can update the production class using API. I am just trying to update one of my production trigger using eclipse. This is not getting saved instead it is showing other test class ...
2
votes
1answer
38 views

Permission Sets on Quotes Template

I would like to create a permission set to give an access to all quote templates. I do not want some users within the same profile to see or have access to the quotes template. How to user can only ...
0
votes
0answers
43 views

How to save the record as a specific user

I am logged in as a site user and have a scenario to update a record on the standard object. The site user doesnt have edit permissions on the object. So, is it possible to update the record as a ...
1
vote
0answers
45 views

Why Mavensmate Does not Work in Multiple Environments? [closed]

I want to use Mavensmate as it has a wonderful interface and more features than eclipse. But I am facing problem with opening it at multiple places. I installed it in my office, and now it is not ...
1
vote
0answers
44 views

Unable to execute a REST method from workbench

I am getting the following error when I make a request to a REST service. HTTP/1.1 500 Server Error Date: Wed, 17 Feb 2016 22:09:03 GMT Content-Security-Policy-Report-Only: default-src https:; ...
2
votes
1answer
103 views

Why is my salesforce org asking for security code every day?

When I am trying to log in with sandbox (or production) credentials, every day asking for a security code which I receive on my phone. This is happening even though I logged in to the same system ...
2
votes
0answers
28 views

Can public force.com sites be accessed from “restricted countries”

As from the summer 15 release, Salesforce started blocking users from logging in from "restricted countries" like Cuba and Iran. (http://trust.salesforce.com/trust/blocked) Does this also apply to ...
1
vote
1answer
15 views

Question on Security setup Accounts/Opportunities. Users read access to Account prevent from creating Opportuntiies?

I thought I had a pretty good handle on security in SF. Have received a requirement that I can't seem to meet with no code. Basically OWD - Accounts, Contacts and Opportunities are all Private. ...
0
votes
0answers
21 views

Password secured area with exacttarget

I want to create a bunch of microsites where contacts need to login with their credentials (Stored in Salesforce) to fill out surveys. Anyone ever done something like that? Best Practices?
0
votes
1answer
47 views

How Field level and object level security enforced in apex class? [closed]

As per the standard documentation provided by salesforce, the apex logics executes in system mode i.e. the field level security and object level securities are not respected. But, if any apex logic ...
2
votes
2answers
42 views

Unable to get the security token to my email id

I have reset the security token thrice. And I waited for 1 hour , to receive the email from salesforce. I have still not received the security token from Sales force.My org is Sandbox.
0
votes
0answers
18 views

Custom App Security Model

I have an app that has a number of custom objects that are linked with a master detail relationship model. The app needs to be generic as I won't know the security setup up front. The app is also ...
1
vote
0answers
29 views

Why isn't login forensics available on government pods?

Not that I work on a government pod, but I'm curious. I read this in the Spring'16 release notes. Why on earth would Salesforce keep this feature from a sys admin on a government pod? I'd like to know ...
0
votes
0answers
19 views

Login History. Get Mobile Device Id Values

I am using the following query to get the login history for users to identify if the user logged in using a mobile device or not. SELECT ...
1
vote
1answer
63 views

CRUD permission check Security Review with SOQL queries needed?

The CRUD permission check for Security Review has been imposed recently, though I'm clear on the DML statement and Create/Update/Delete permissions I need to check for in my code, but I'm not clear ...
1
vote
1answer
25 views

How can I restrict a profile's read access on an object if my org-wide default is public read-only?

My org has a default of public read-only on a certain object, but I want to set up a new profile that can only see certain records based on criteria. Is this even possible to do? If so, how?
0
votes
2answers
107 views

INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY: insufficient access rights on cross-reference id: []

I have a custom object Resource__c having master detail with Account object. I have Account1 created by User1 and if User2 goes to create resource on Account1 then below error is given ...
0
votes
2answers
57 views

Not seeing some custom objects and custom fields in Salesforce Workbench

We just promoted a changeset from a Developer Pro sandbox to a Full Copy sandbox. We're not seeing many of the promoted custom objects in workbench for either sandbox. We're not seeing most of the ...
9
votes
1answer
76 views

Is web to lead form data submits in encrypted form?

I want to know that when web to lead form is submitted into salesforce, if the data in that form is encrypted or not. I want to know that how much security is applied on web to lead? I want to ...
2
votes
3answers
538 views

Deployment of “Active Content” in Email

When I try to ant deploy ("Force.com Migration tool") to one of our sandboxes I get the following error message: email/folder/sometemplate.email -- Error: Your template contains active content, which ...
9
votes
2answers
155 views

Whitelist all IP/ Ray Dehler method does not work any longer

There are 2 parts to my question Traditionally, while developing and distributing Salesforce mobile apps for beta testing and feedback, I've used the Ray Dehler method for whitelisting all IP ...
1
vote
2answers
46 views

Is it a must to have the source profile in target organisation prior to deployment

I deployed number of profiles to a new sandbox environment via a change-set, but what I can see is, all of the profiles I added to the change-set are NOT deployed properly, (most of the profiles are ...
2
votes
0answers
10 views

Require login on each access of Salesforce1 app

I would like to require our users to have to enter their Salesforce password each time (or after a certain time of inactivity) they access the Salesforce1 app on their IOS and Android devices. The ...
3
votes
1answer
45 views

Is it possible to query the Security Permissions on a Apex Class via SOQL?

I wish to know how many apex classes does a particular profile have permissions to execute. Is there any way to write a SOQL query to get this information? We are in process of setting up a community ...
3
votes
1answer
59 views

When to use Groups and when Roles

We are building a solution using service cloud console which will be used by multiple customers. One org will have data in various objects like accounts, contacts, cases and some custom objects for ...
0
votes
1answer
38 views

Record level security among multiple customers accessing solution

We are building a solution using service cloud console which will be used by multiple customers. We will have our code pushed to one org in production and this org will have data in various objects ...
1
vote
0answers
20 views

How to enable Verification Code emails for Customer Community users?

When you log in to Salesforce for the first time from a new computer (or new browser), you are asked to provide a Verification Code which is emailed (or texted) to you, as an additional security ...
1
vote
0answers
26 views

How to allow community users to modify their contacts without seeing other contacts

We have a customer community using custom apex controllers that look up and modify the community user's associated contact (based off User.ContactId). I'd like to set the permissions for the community ...
0
votes
1answer
38 views

Making fields visible only in ListView

I am having a hard time accomplishing this. My requirement is to have Account object private but i need few fields from accounts to be visible in the account list view for all users such as Account ...
0
votes
0answers
101 views

Problems with apex:iframe

I have an iframe with the Magento login url but it doesn't work. The errors, that Chrome throws, are: Mixed Content: The page at ...