0

I have a push topic query that includes a field hidden from most users in the where clause. My observation is that a notification only occurs when the running user has FLS read or write access to the fields in the where clause. I cannot find any documentation to support this observation.

Example: For Push Topic with configuration:

SELECT FirstName,LastName,Id,OwnerId FROM Lead where Send_to_LRS__c = TRUE

And NotifyForFields = Where

And NotifyForOperationCreate = True

A user with Read access to Send_to_LRS__c will trigger a notification when a Lead in inserted with Send_to_LRS__c = True (as set by default field value in field configuration).

A user without Read access to Send_to_LRS__C does not trigger a notification when a Lead is inserted with Send_to_LRS__c = True (again, as set by default field value in field configuration).

This implies that the push topic query executes as the running user and not as the system user the way Apex operates.

Improve this question

1 Answer 1

Reset to default
0

You're right. From the push topics docs on security:

Subscribers receive notifications about records that were created, updated, deleted, or undeleted if they have:

  • Field-level security access to the fields specified in the WHERE clause
  • Read access on the object in the query
  • Read access on the PushTopic
  • Visibility of the new or modified record based on sharing rules

Not only does this help with security, but it also helps in reducing the quantity of messages that you'd get if the object in question is private sharing.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .