Salesforce user security is an intersection of sharing, user, Profiles, roles, roles hierarchy and object permissions.

learn more… | top users | synonyms

1
vote
0answers
5 views

Question on Security setup Accounts/Opportunities. Users read access to Account prevent from creating Opportuntiies?

I thought I had a pretty good handle on security in SF. Have received a requirement that I can't seem to meet with no code. Basically OWD - Accounts, Contacts and Opportunities are all Private. ...
0
votes
0answers
11 views

Password secured area with exacttarget

I want to create a bunch of microsites where contacts need to login with their credentials (Stored in Salesforce) to fill out surveys. Anyone ever done something like that? Best Practices?
0
votes
1answer
29 views

How Field level and object level security enforced in apex class? [on hold]

As per the standard documentation provided by salesforce, the apex logics executes in system mode i.e. the field level security and object level securities are not respected. But, if any apex logic ...
2
votes
2answers
37 views

Unable to get the security token to my email id

I have reset the security token thrice. And I waited for 1 hour , to receive the email from salesforce. I have still not received the security token from Sales force.My org is Sandbox.
0
votes
0answers
11 views

Custom App Security Model

I have an app that has a number of custom objects that are linked with a master detail relationship model. The app needs to be generic as I won't know the security setup up front. The app is also ...
1
vote
0answers
14 views

Why isn't login forensics available on government pods?

Not that I work on a government pod, but I'm curious. I read this in the Spring'16 release notes. Why on earth would Salesforce keep this feature from a sys admin on a government pod? I'd like to know ...
0
votes
0answers
8 views

Login History. Get Mobile Device Id Values

I am using the following query to get the login history for users to identify if the user logged in using a mobile device or not. SELECT ...
1
vote
1answer
30 views

CRUD permission check Security Review with SOQL queries needed?

The CRUD permission check for Security Review has been imposed recently, though I'm clear on the DML statement and Create/Update/Delete permissions I need to check for in my code, but I'm not clear ...
1
vote
1answer
16 views

How can I restrict a profile's read access on an object if my org-wide default is public read-only?

My org has a default of public read-only on a certain object, but I want to set up a new profile that can only see certain records based on criteria. Is this even possible to do? If so, how?
0
votes
2answers
68 views

INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY: insufficient access rights on cross-reference id: []

I have a custom object Resource__c having master detail with Account object. I have Account1 created by User1 and if User2 goes to create resource on Account1 then below error is given ...
0
votes
2answers
17 views

Not seeing some custom objects and custom fields in Salesforce Workbench

We just promoted a changeset from a Developer Pro sandbox to a Full Copy sandbox. We're not seeing many of the promoted custom objects in workbench for either sandbox. We're not seeing most of the ...
9
votes
1answer
62 views

Is web to lead form data submits in encrypted form?

I want to know that when web to lead form is submitted into salesforce, if the data in that form is encrypted or not. I want to know that how much security is applied on web to lead? I want to ...
2
votes
2answers
475 views

Deployment of “Active Content” in Email

When I try to ant deploy ("Force.com Migration tool") to one of our sandboxes I get the following error message: email/folder/sometemplate.email -- Error: Your template contains active content, which ...
8
votes
1answer
148 views

Whitelist all IP/ Ray Dehler method does not work any longer

There are 2 parts to my question Traditionally, while developing and distributing Salesforce mobile apps for beta testing and feedback, I've used the Ray Dehler method for whitelisting all IP ...
1
vote
2answers
40 views

Is it a must to have the source profile in target organisation prior to deployment

I deployed number of profiles to a new sandbox environment via a change-set, but what I can see is, all of the profiles I added to the change-set are NOT deployed properly, (most of the profiles are ...
2
votes
0answers
9 views

Require login on each access of Salesforce1 app

I would like to require our users to have to enter their Salesforce password each time (or after a certain time of inactivity) they access the Salesforce1 app on their IOS and Android devices. The ...
3
votes
1answer
29 views

Is it possible to query the Security Permissions on a Apex Class via SOQL?

I wish to know how many apex classes does a particular profile have permissions to execute. Is there any way to write a SOQL query to get this information? We are in process of setting up a community ...
3
votes
1answer
48 views

When to use Groups and when Roles

We are building a solution using service cloud console which will be used by multiple customers. One org will have data in various objects like accounts, contacts, cases and some custom objects for ...
0
votes
1answer
31 views

Record level security among multiple customers accessing solution

We are building a solution using service cloud console which will be used by multiple customers. We will have our code pushed to one org in production and this org will have data in various objects ...
1
vote
0answers
10 views

How to enable Verification Code emails for Customer Community users?

When you log in to Salesforce for the first time from a new computer (or new browser), you are asked to provide a Verification Code which is emailed (or texted) to you, as an additional security ...
1
vote
0answers
19 views

How to allow community users to modify their contacts without seeing other contacts

We have a customer community using custom apex controllers that look up and modify the community user's associated contact (based off User.ContactId). I'd like to set the permissions for the community ...
0
votes
1answer
35 views

Making fields visible only in ListView

I am having a hard time accomplishing this. My requirement is to have Account object private but i need few fields from accounts to be visible in the account list view for all users such as Account ...
0
votes
0answers
65 views

Problems with apex:iframe

I have an iframe with the Magento login url but it doesn't work. The errors, that Chrome throws, are: Mixed Content: The page at ...
1
vote
0answers
13 views

Grant different access to documents folder for different groups

I have a document folder and two user groups that need different access for them: one of the groups should be able to create documents in the folder, the other group should be able to read documents ...
0
votes
1answer
20 views

Why do I need create permission to open page in edit mode?

I checked the profile settings. User has access to all fields and read access to object. The page block has mode attribute set to edit but the page doesn't render input fields unless I add Create ...
3
votes
0answers
30 views

Visualforce Remote Objects Returning Empty Objects

I've got a remote object query operation that's failing in our managed package in a particular client's org. Essentially it queries an object with some filters based on the date, and it's returning ...
0
votes
1answer
306 views

system.security.NoAccessException: Update access denied for RecordType

I have a Visualforce Page that uses a standard controller (Opportunity) and an extension. In the extension I have a method that saves updates to the opportunity and a related contact. The extension is ...
1
vote
1answer
23 views

Hide custom object for multiple profiles

How to hide custom object for multiple profiles? Direct way to do this is go to profile > click edit and un-check object access (read/create/edit/delete/view all/Modify all) and that object won't be ...
4
votes
1answer
35 views

Why do force.com sites domains have secure in the domain and some don't?

In our production org, force.com sites have two endpoints listed https://<ourdomain>.secure.force.com http://<ourdomain>.force.com It seems that these URLs can be used interchangeably ...
1
vote
1answer
19 views

Salesforce Security - Identifying vulnerabilities

I have completed a review of the following aspects of our organization a) Authentication b) Verifying profile based permissions are inline c) IP restrictions d) Timeout on unattended sessions e) ...
0
votes
0answers
5 views

Quote approval restriction between different groups

I have an approval process for approving quotes. My requirement is to allow users of a group to submit quote for approval of each other's in that group only. I have different groups, group A, group ...
4
votes
1answer
152 views

Salesforce 1 Security Question

While going through the login history for the last 6 months, I could see numerous users of our organization utilizing Salesforce 1 for accessing our CRM instance. Whats our concern is that many of ...
3
votes
0answers
28 views

Permission Set issue

I am writing to you in order to describe permission set issue that i don't know how to figure out. I want to give an access to part of financial force package (possibility to assign current company ...
1
vote
0answers
35 views

Inheriting / Extending sharing rules on a custom object

Here is my scenario, GroupAccount - (ORG wide READ permission) A custom object which is parent object of Account (standard) One GA can have many Accounts Account - (ORG wide - Private)(Has ...
0
votes
0answers
25 views

Change Password not functional on iOS9 mobile app, oauth

When the oAuth screen requires the user to change their password, and takes them into the Change Password page, then the 8 character / 1 letter / 1 number status lights don't come on, and the change ...
2
votes
0answers
21 views

Role for Inactive users

In our salesforce instance the roles were cleaned up and as a result some of the inactive user's role were deleted, now those inactive users owned records are not pulled in reports as the owner of ...
1
vote
0answers
42 views

Products Security in Partner Community

We are currently working with Products and Pricebooks in Partner Community. The security side of it is still an idea in Salesforce but is there anyway we could restrict the Products visibility for ...
0
votes
0answers
27 views

Public Groups Relationship based on Roles

I need one clarification related about public groups. In my Developer box i have a role hierarchy configuration for multiple countries. When i add any one of the user to some public groups then the ...
1
vote
1answer
34 views

Want to prevent a user to access other user cases

I Want to prevernt user to access other user cases in search and report as well in salesforce, when user at same level in role hierarchy. My Organization-Wide Defaults setting is following Case: ...
3
votes
1answer
58 views

System wide Sharing Rules: Vacation

I am trying to redefine the security on my org. I have rebuild the profiles (down from 78 to about 12) and the roles now make a lot more sense. One of my issues is that the sales support folks, who ...
3
votes
1answer
97 views

How to safely run User-generated SOQL query strings

Background Context: I'm building a small feature similar to Andrew Fawcett's Declarative Lookup Rollup Summary tool. We will allow users to enter in details for their own WHERE clauses for the ...
0
votes
1answer
25 views

Checkmarx results for appExchange entries

Our company's internal Information Security folks are used to using Veracode to scan web & app code. I understand appExchange entries are scanned via SFDC / Checkmarx. My question is: Is there ...
0
votes
0answers
12 views

How to avert the error of “Too many token validations for user” in Product org?

When I`m making development on a Product Org for a while, the eclipse often return an error message as following: System.SecurityException: Too many token validations for user I`d like to know that ...
0
votes
0answers
25 views

Restrict users to one account

I'm wondering if there is feature using profiles/roles or any other mechanism in Salesforce that allows me to restrict users to one account, that means they can access others object but see the ...
5
votes
1answer
52 views

Criteria-based field-level security

I have two Departments who each have different sells, based on a custom object. I would like for Dept A to only see certain fields in the sells which are created in Dept B - and vice versa. If I ...
0
votes
1answer
46 views

Can you disable the activation email on login?

I have a demo org that is a enterprise partner account, specifically created and maintained for demos. I'd like to let people use this on their own but it's frustrating to have to figure out who just ...
1
vote
0answers
61 views

Difference between Exception and DMLException

I am inserting an object in Apex which has two master-detail relationships to other objects but as far as I can tell, the permissions on these objects are set fine. When I try to insert my records ...
2
votes
2answers
38 views

Do I need to add every profile to the Apex Classe security?

I am following the trigger framework explained in this image: Link In this case, Do I need to add every profile to the AccountHelper class security? My AccountHelper class does not have with sharing ...
0
votes
1answer
28 views

Record ownership…dilemma

Suppose user A transfers his Records User B .Will user A still retain owership after transferring? How can user A revoke access of Record from User B
0
votes
0answers
23 views

Adding an ability to edit selected fields for non-owned Account objects

I have been following Trailhead on developer.salesforce.com, but the standard declarative method doesn't allow me to do what I want to accomplish. Here is my requirement: We have a "Sales User" ...