Salesforce user security is an intersection of sharing, user, Profiles, roles, roles hierarchy and object permissions.

learn more… | top users | synonyms

0
votes
1answer
10 views

Call a Secured Web Service from SFMC

I have a task to call a secured web service from a SFMC Microsite. I understand this can be achieved by - Importing the Private Certificate on SFMC (Admin -> Data Management -> Key Management), but ...
0
votes
0answers
31 views

Visualforce security settings in a managed package

I'm developing a package and I just tried to use it with another non-system-administrator user account. When I tried to access the Visualforce page I got a "permissions denied error". So I went into ...
0
votes
2answers
20 views

Can a customer community user create a new detail record?

We have a customer community user and want the user to be able to create a master-detail record for different kinds of objects. However, everytime we try to insert a new record we get the following ...
3
votes
3answers
244 views

How to set TLS Version in Java SOAP API

I am trying to connect to a new org using the Java SOAP API and am getting the following error: [UnexpectedErrorFault [ApiFault exceptionCode='UNSUPPORTED_CLIENT' exceptionMessage='TLS 1.0 has been ...
0
votes
0answers
24 views

Use Strict Transport Security (HSTS) with Salesforce

We are having a third party do security testing for our Salesforce community and one of their suggestions was to "utilize the "Strict-Transport-Security" response header across the entire domain as a ...
0
votes
0answers
13 views

Salesforce Bcc tracking All Activities and viewable/searchable throughout entire company

All of our emails are currently being Bcc'd and are searchable within Salesforce. I would still like to use this functionality because it's helpful to the sales organization if possible. How do I ...
0
votes
0answers
31 views

OAuth1 stopped working

Our SalesForce app is connected to GAE via OAuth1, each time we provision new account we make this connection. Lately we start getting this errors when trying to establish the connection: An ...
0
votes
1answer
34 views

How to give access to a Visualforce Component to a profile

I want to give access to a Visualforce Component to a profile. I know I can give access to Apex Classes and Visualforce Pages under "Users -> Profiles -> [Profile Name]" as explained here. However, I ...
0
votes
0answers
11 views

Secure REST Service published on Sites ( No user license needed)

I developed a REST service with apex and also I published it on Force.com Sites and is accesible to the public. I wonder what would be the best practice in order to secure this service, usually my ...
2
votes
1answer
43 views

NO user can log into the org as a result of profile change

We have a developer org and all of the users (including the admins) in the org have the same profile and the profile was mistakenly updated to have NO rights. (simplified version of the story). Now ...
1
vote
1answer
22 views

Apex Managed Sharing

If I have a scenario where there is a parent object and say 5 child objects, all linked via a master-detail relationship is there a way to use Apex sharing to add additional sharing to a child object ...
3
votes
1answer
21 views

Test against organization data approach

As SF Admin, I am working on a data access project which implement the different access levels (e.g. OWD, Sharing Rules, Roles and Profiles) in Salesforce. I'm ready to refresh the Partial Copy ...
0
votes
0answers
7 views

Generic owasp.SFDCAccessController exception cause in ESAPI library

We are using the ESAPI library to secure our dml operations. It works fine; however, sometimes when an update or insert fails because of an exception, we get a generic exception message like ...
0
votes
1answer
16 views

On with salesforceThe public key certificate used for Single Sign.com (Community) (http://www.salesforce.com) will expire email

I received this email and I understand that we need to install a new public key certificate. However, I'm not sure where to start and how to do this. Can someone please shed some light? Thank you in ...
2
votes
0answers
31 views

OpportunityContactRole security

In a nutshell, how from the REST API (outside the Apex wall here), can I tell I can create/edit/remove an OpportunityContactRole from scratch. Part I of the answer is I believe the ...
2
votes
2answers
34 views

SOQL Query: Stored XSS Error

I have given my code for Security code Scanner but it is given the following error due to Query: Stored XSS My query is like this. loan=Database.query('SELECT Name, fintechLLC__Application__c, '...
1
vote
2answers
41 views

Record sharing using lookup field criteria using apex (similar to controlled by parent)

We have a custom object that has a lookup to account (similar to Contact looking up to Account). We want the user who owns an account to see the records looking up to that account automatically ...
1
vote
1answer
16 views

Updating profiles with Managed Package update

We have several profiles in our managed package that specify access levels to different users. We continuously build new customer fields and objects and want to be able to update the profile with the ...
2
votes
1answer
60 views

Google is making a change to DMARC that affects Salesforce

If you took a looked into Salesforce-Outbound-Emails-Impacted-by-Google-DMARC-Policy I understood we can't use other gmail address to send email from salesforce instance. So as per my understanding ...
1
vote
0answers
29 views

Limited Admin or Delegated Admin profile in Salesforce

So this is the conundrum I am in, we are wanting to store HR sensitive information within salesforce such as salary info and SSN the issue is that we have part of our development team has admin access ...
1
vote
0answers
26 views

Dynamic Security?

I have a fairly complex app I'm building which currently has 24 custom objects, 20 of which fall into a Master-detail relationship at the moment but I think I'm going to have to change that. The ...
1
vote
2answers
39 views

How to solve salesforce security issue (From Zap scanning report)

I am getting " X-Frame-Options Header Not Set" issue in salesforce how I can solve this issue, I have attach a image please take a look on that image.
2
votes
0answers
50 views

invalid security token

Hi we were given an ExactTarget php application to port from an older Magento installation to a new Magento installation. This code is based on the ExactTargetSoapClient, soap-wsse.php and xmlseclibs....
0
votes
0answers
13 views

How could i give a user who tests the application access to login as user but not have access to setup and configuration.

The business users who tests applications today have administration access to login as different users and test as other users, this access is important, but we want to confine them to not have access ...
0
votes
1answer
28 views

Does assigning visualforce page to object buttons override the OWD

I have Opportunity OWD set to Private. Have over ridden the NEW,EDit,View and Clone buttons of Opportunity with VF page. I created opp record with USER1. Logged in as USER2 and still able to see ...
4
votes
0answers
31 views

Enable Apex Classes - Sometimes Only Global, Sometimes Includes Public

I have a managed package that I distribute to clients and I'm running into a curious situation trying to help one install. I have noticed that in the Enable Apex Classes for their System Administrator ...
1
vote
1answer
50 views

How to make pdf rendering non-editable or password protected

Although the question I am asking may sound stupid but i am trying to check the best possible secure solution. Is it possible to make pdf rendering non-editable or password protected
1
vote
0answers
73 views

SSL certificate problem: unable to get local issuer certificate, curl_errno 60

I'm trying to integrate PHP script with Salesforce by following the example on the link: http://developer.force.com/cookbook/recipe/interact-with-the-forcecom-rest-api-from-php But I get the error ...
1
vote
1answer
21 views

List view assigned to roles can't be seen by users with that role

I'm sure I'm overlooking something simple here. We have a list view on case where visibility is extended to a set of roles: However, when I login as a user with one of the defined roles, the UI ...
1
vote
0answers
20 views

Reduce the Permissions of User

I have Lead OWD set to public Read/Write. I m creating new User with new profile..with Lead permissions as CRED(No view All,Modify All). I want this user not to see other lead records. How to ...
1
vote
1answer
27 views

Need to change object permissions of standard profile-URGENT

I have Lead OWD set as Private. I have 5 users in Marketing User(std obj)..I need to give View All & Modify All permissions on lead object of this profile. How to approach.? Cloning marketing ...
1
vote
1answer
40 views

Field Audit Trail

Did anyone used Field Audit Trail to archive data in production? any experience/limitations with it? also is it part of standard licensees agreement or we need to buy something new like shield? https:...
2
votes
1answer
35 views

Profile / Permissions best practices? [closed]

Hello and thank you in advance. I'm curious if anyone has any resources they could point me to for best practices around permissions sets / profiles / etc. The reason for this is because as an ...
1
vote
0answers
44 views

Marketing Cloud SQL Injection?

I had a question come up that seemed a bit ridiculous at first, but has got me wondering. Is it possible to run any sort of script or SQL injection equivalency on forms that are configured to direct ...
0
votes
4answers
135 views

how to skip verification code for a user in salesforce

I want to skip the verification code for a user I want the users not to receive the "''You recently logged in to Salesforce from a device we don't recognize.'' How can I do ? I have defined lists of ...
1
vote
1answer
40 views

Security Scan for remote site

Can you please help me running scan for a remote site setting. SFDC asked for chimera report for remote Site setting. eg. I have a remote site setting with URL as: https://abc.abc.com and which gets ...
2
votes
1answer
52 views

How to restrict visibility of account to an opportunity owner?

Transferring ownership of an account is quite common in the company. If we change the owner of an account, for historical reason, the opportunity owner should be maintain, and that's ok we can do ...
2
votes
1answer
27 views

Your user profile is not associated with this service

I've cloned a profile called Heathrow Portal which works fine when you want to log in onto the portal. But Now that I've created a profile for Atkins it comes up with the following error message : "...
0
votes
0answers
10 views

Google Authentication for existing (partner) community users

I'm wondering if I can use Google authentication for existing users. I think of having partner users who get their salesforce login data in a first step and later can choose to use their google ...
0
votes
0answers
26 views

Clickjacking prevention in Marketing Cloud

Salesforce Marketing Cloud users: Has anyone implemented a method to prevent unapproved domains from framing landing pages (especially smart capture forms)? Unfortunately the built-in Clickjacking ...
0
votes
0answers
34 views

Hide records and their lookup children between subordinates

I have a scenario where there is a Master Object-A and couple of child(lookup) objects-B,C,D,E related to the Master. I have some users in my system. I would like to set a security in such a way that ...
-1
votes
1answer
61 views

Hide a Lead in sfdc based on lead status

I got a requirement like want to hide leads in my org based on the lead status.i have a value in status field called customer.so,when user selects customer in status field the lead had to be hidden ...
3
votes
2answers
322 views

How do I skip the security question in Salesforce?

I had a user whose email address has been changed to another user. Now the new user gets an email to change the password along with the security question of the previous user. How can I prevent the ...
0
votes
0answers
38 views

I have a user who should not be able to edit a record, but can. Sharing Settings shows that they have Read Only access

I have a user who should not be able to edit a record, but can. Sharing Settings shows that they have Read Only access. I have checked for profiles that override the sharings settings, and there are ...
1
vote
2answers
70 views

Can we still save/update production apex trigger code using API?

As we know we can update the production class using API. I am just trying to update one of my production trigger using eclipse. This is not getting saved instead it is showing other test class ...
2
votes
1answer
56 views

Permission Sets on Quotes Template

I would like to create a permission set to give an access to all quote templates. I do not want some users within the same profile to see or have access to the quotes template. How to user can only ...
0
votes
0answers
44 views

How to save the record as a specific user

I am logged in as a site user and have a scenario to update a record on the standard object. The site user doesnt have edit permissions on the object. So, is it possible to update the record as a ...
1
vote
0answers
45 views

Why Mavensmate Does not Work in Multiple Environments? [closed]

I want to use Mavensmate as it has a wonderful interface and more features than eclipse. But I am facing problem with opening it at multiple places. I installed it in my office, and now it is not ...
1
vote
0answers
79 views

Unable to execute a REST method from workbench

I am getting the following error when I make a request to a REST service. HTTP/1.1 500 Server Error Date: Wed, 17 Feb 2016 22:09:03 GMT Content-Security-Policy-Report-Only: default-src https:; ...
2
votes
1answer
119 views

Why is my salesforce org asking for security code every day?

When I am trying to log in with sandbox (or production) credentials, every day asking for a security code which I receive on my phone. This is happening even though I logged in to the same system ...