Salesforce user security is an intersection of sharing, user, Profiles, roles, roles hierarchy and object permissions.

learn more… | top users | synonyms

4
votes
0answers
30 views

Criteria-based field-level security

I have two Departments who each have different sells, based on a custom object. I would like for Dept A to only see certain fields in the sells which are created in Dept B - and vice versa. If I ...
0
votes
1answer
19 views

Can you disable the activation email on login?

I have a demo org that is a enterprise partner account, specifically created and maintained for demos. I'd like to let people use this on their own but it's frustrating to have to figure out who just ...
1
vote
0answers
15 views

Difference between Exception and DMLException

I am inserting an object in Apex which has two master-detail relationships to other objects but as far as I can tell, the permissions on these objects are set fine. When I try to insert my records ...
2
votes
2answers
31 views

Do I need to add every profile to the Apex Classe security?

I am following the trigger framework explained in this image: Link In this case, Do I need to add every profile to the AccountHelper class security? My AccountHelper class does not have with sharing ...
0
votes
1answer
20 views

Record ownership…dilemma

Suppose user A transfers his Records User B .Will user A still retain owership after transferring? How can user A revoke access of Record from User B
0
votes
0answers
21 views

Adding an ability to edit selected fields for non-owned Account objects

I have been following Trailhead on developer.salesforce.com, but the standard declarative method doesn't allow me to do what I want to accomplish. Here is my requirement: We have a "Sales User" ...
1
vote
2answers
63 views

Login Security for Integrated Applications

Let's say you have a system that you want to integrate with Salesforce. You create a new user for the system, set up a trusted ip range, make the profile an API-only user, and then give the username ...
3
votes
2answers
33 views

Hiding Custom Object Records from Administrators

I'm working on a managed package, which includes a Custom Object with sensitive information. Is there any way to prevent Salesforce Administrators from seeing the information stored in this object? ...
4
votes
1answer
44 views

Is the integration of Google Maps and Lightning impossible because of the restrictive Content Security Policy?

Attempting to fiddle with Lightning Components I ran into Lightning's super restrictive static resources limits. Any attempt to load the Google Maps API fails with the following error: Refused to ...
2
votes
1answer
33 views

Visibility: Roles, Profiles and Sharing Rules

My org contains many companies that are effectively separate but belong to the same group. Some of these companies indirectly compete one against another, though this is not encouraged. My issue is ...
0
votes
0answers
38 views

Data Security - Controlling Access to Fields from Trailhead

This is the first vague challenge for me. I had to create a custom profile and a permission set. I'm getting an error of "Challenge not yet complete... here's what's wrong: The 'Basic Account User' ...
0
votes
0answers
39 views

Where to store client ID and secret for OAuth for a command line application

Salesforce expects client ID and secret from an application that wants to talk via Rest APIs. I'm writing a command line application that will be hosted on github. What's the recommended approach to ...
3
votes
1answer
31 views

How to override Insufficient Privileges Error [duplicate]

Is there any way to gain access to the standard "Insufficient Privileges" page and edit/replace it with custom error?
2
votes
1answer
64 views

Securing a REST API

Once the Connected App is created, how is access granted to various endpoints exposed as REST Services via Apex REST? For example, if we have a Class called CreateCustomer, and it is decorated like ...
0
votes
1answer
34 views

client_secret compromised, options?

We have no evidence to believe, but are acting as if, the client_secret has been compromised on our Salesforce OAuth 2 App. I was wondering what our options are: is it possible to generate a new ...
-1
votes
1answer
18 views

Connected App permission

I want to control which of my users can allow a connected app. Can I as an admin prevent users from "Allowing" a connected app?
1
vote
1answer
25 views

Permissions needed to assign login access permissions

I have a profile that needs to allow an administrator access to their log in, but by going to My Settings -> Personal -> Grant login access they get an insufficient privileges error. What permissions ...
1
vote
0answers
18 views

Delegated Administration log in not working

I am using delegated administration to allow supervisors to log in as their subordinates. However it is not working. I have set the correct users to give administrative access to and have set the ...
0
votes
0answers
20 views

Permission Customize Application depends on permission(s):Manage Translation

I am getting above problem when granting modify All permission in permission set . How i can solve above problem. what is wrong with me? Thanks in Advance.
3
votes
0answers
9 views

How to help portal/community users with out TLS 1.1 enabled?

Salesforce will be phasing out support for TLS 1.0 over the coming year. Browsers will need TLS 1.1 or higher to connect to Salesforce. Users of Internet Explorer v, 8, 9, & 10 on Windows 7 or v. ...
1
vote
0answers
19 views

Attempts to update a custom object using the default user on a force.com site returning 401

I am attempting to integrate Twilio with Salesforce to provide telephony based access for field staff. I have configured the site and have a custom controller that successfully queries custom ...
1
vote
1answer
46 views

Make a record visible to only a person in a field

I will be making a bunch of new records for a custom object through an import with Data Loader. One of the fields I will be populating will be a lookup field to the User object. What is the best way ...
3
votes
1answer
113 views

security considerations while using url parameters in soql as bind variables

on most of our pages, we have some url parameters. we use these parameters as bind variables in various SOQL queries. is there a common pattern we can use which takes care of security issues.
1
vote
0answers
16 views

How can produce a list/report that shows which Profiles have access to an App?

I am attempting to see which Profiles (or more specifically which Roles) have access to an App. I can see this by going into each individual Profile and checking their Custom App Settings section of a ...
0
votes
1answer
97 views

Does Salesforce have an on-premise solution?

For companies that do not want to have their data in the cloud, does Salesforce offer an on-premise solution? If not, what solutions/certifications do they provide for security conscious or highly ...
1
vote
1answer
98 views

Prevent related record deletion, except when parent record is being deleted

I have two custom objects, call them Parent and Child. Child has a Lookup to Parent, via Parent__c. It is not a Master:Detail relation. What pattern could I use to prevent deletion of a Child record ...
4
votes
2answers
194 views

How Checkmarx works

Can someone please advise how Checkmarx/ Force.com Security Source Scanner will be performing code review Is code review happening within Salesforce servers or code get ported to Checkmarx server ...
0
votes
2answers
64 views

Picklist field is disabled but profile and layout shows editible

I have a picklist field on a custom object that is disabled (grayed out) when I am editing a record on that custom object for a user in a profile that should have write access to that field. I have ...
1
vote
3answers
118 views

How can I hide “Recently Viewed Opportunities” list view for some users?

I need to hide the "Recently Viewed Opportunities" list view from all users other than admin. While searching I found that, this list view can not be edited. Does this also mean that it cannot be made ...
1
vote
1answer
39 views

What is the meaning of this error message?

I got an unmanaged package from the developer. I installed it in the developer org. Created a managed package from the components and gave the managed package for security review. Here is the message ...
1
vote
1answer
56 views

Password Expiration

I would like to now if there is way to "rollback" a password reset in salesforce.(because of this happends the security token would also be reset and this is not desired) Thank you..
0
votes
1answer
76 views

Using without sharing with customer community - can't create account

It looks like customer community users can't create Account records because there is no create option in object settings for a customer community profile. I thought that I could get around this if ...
-1
votes
1answer
56 views

Security and sharing for apex class

I created a profile with no special privilege like author apex(which is a combination of modify all data and view and setup configuration)given to it. The visualforce page is made accessible to the ...
3
votes
1answer
109 views

Can I Mass Modify Object Settings > Tab Settings for All Profiles? (Default On/Default Off/Hidden)

I am in the process of my first Salesforce deployment to Production (my company has been working with an implementation team for 7 months or so, and we are going live on Monday). We had some security ...
6
votes
3answers
123 views

How to restrict user access to massdelete button on listview?

I have a custom button called massdelete on listview. I don't want everyone to see this button but only selected profiles or roles..How to do this? Thanks in Advance..
6
votes
1answer
124 views

Considerations for calling out to enterprise applications behind a firewall from salesforce?

If I'm looking to integrate an enterprise application behind a firewall with Salesforce, what considerations should I be making? From the architect certification study guide Given a scenario, ...
0
votes
3answers
139 views

Can we deploy PROFILES alone from one sandbox to another?

Can we deploy only profiles from one sandbox to another? Thanks
0
votes
0answers
122 views

An invalid security token was provided

After adding reference to "https://webservice.s7.exacttarget.com/etframework.wsdl", I tried to send mail by using following code, but it gives me an error " An invalid security token was provided ...
3
votes
2answers
82 views

Is data transfer between Salesforce and Heroku secure?

I wanted to check how secure is data transfer between salesforce and heroku. Is there any encryption mechanism built in when we integrate salesforce and Heroku (when data transfer occurs). Update - ...
2
votes
3answers
49 views

Security considerations when adding instance url to remote sites

Can someone describe the possible security implications of adding the URL for your salesforce instance as a remote site? Understand this allows users to call certain rest apis tooling/metadata. ...
1
vote
2answers
12 views

A way to let non-Salesforce user to have a limited read/write access to internal data

I have a following use case: Company Alpha wants to use Salesforce for recruiting purpose. In order to do so, Alpha would like to let non-Salesforce user to have a limited read/write access to ...
1
vote
1answer
58 views

User can't search on a particular field while other users can

I have a user that is unable to search (sidebar) on an auto-number field on a custom object. The field does have a master-detail relationship with an account, however this user has read all access to ...
1
vote
2answers
240 views

Unable to redirect a page from Visualforce

I'm currently making a custom editor in Visualforce that adds things to a related list. Things from this list are selected and then when the "add packages" button is click it should make the records, ...
8
votes
1answer
407 views

Does Salesforce have an Antivirus feature?

Is there any way to integrate Antivirus in Salesforce, or does this already exist? Additionally, I would like to also have realtime URL scanning of malicious HTML documents and websites. Key ...
1
vote
1answer
16 views

Trying to find information on security for Files attached to Activities. Can you separate it out?

I'm struggling somewhat to find anything on the File Attachment related list in Activities. What I am hoping is to be able to limit who can see/download the file and remove it from being searchable. ...
0
votes
1answer
27 views

How to I prevent a object(standard as well as custom) records(all) to be displayed in global search? [duplicate]

For E.g. Do not allow search results to display for Accounts records
2
votes
0answers
149 views

Why might a certificate import fail, when uploading a certificate not created from a Salesforce-generated Certificate Signing Request?

I've been given two X509 certificates to upload into an org for use in SSO (one for signing, one for decrypting), but I can't seem to upload either of them successfully. As I've been given the ...
1
vote
1answer
29 views

How to serve a Site.com site using HTTPS?

We would like to use a custom HTTPS certificate to serve a new site.com site via the HTTPS scheme. How to implement this in Site.com? I believe the Fall 2014 release added this capability, but I ...
1
vote
0answers
51 views

Login using javascript remoting

we are trying to use AngularJS as a framework for a community site. Problem is that the first page is accessible as a guest user. All required remote action calls are public. At a certain point, the ...
1
vote
2answers
101 views

How to restrict a user's access for accounts they do not own

I have a roles hierarchy like in the image attached. One Sales Manager and UNDER this role, two other roles: Sales_Europe and Sales_US. Assigned to these two roles, i have two users: user_a (Role: ...