0

A Picklist field is changing for a specific user, where the user has no access to update the field on VF Page and by other means like data loader. In the field history tracking it is showing as the user changed the field.

This user is a end user who doesn't have any technical knowledge to make such kind of change by any other means.

2
  • 1
    Do you have controllers/extensions which use without sharing or which entirely omit their sharing declaration?
    – Adrian Larson
    Jan 31, 2018 at 18:42
  • Controller for this VF page is with Sharing.
    – Suresh
    Feb 7, 2018 at 17:33

1 Answer 1

1

The system tracks all changes to a tracked field, even if the user did not directly update the value via the UI, mobile app, or API. Visualforce code ignores FLS, as do triggers, Apex Code, and Workflow Rules. An administrator could easily set up ways to update the field without the user being able to update, or even view, the field.

2
  • Could you please eloborate more on this what would be the best approach I can take to identify the issue.
    – Suresh
    Feb 7, 2018 at 17:35
  • @Suresh You would need to catch it in the act. Turn on some debug logs for a given user, let them do whatever it is they do that causes the field to change, then read the logs to see how it was changed. As I said, it could have been a Flow, Process Builder, Workflow Rule, or Trigger. Not all updates will appear though, so this might be difficult to track down.
    – sfdcfox
    Feb 7, 2018 at 17:39

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .