1

Can any package can be both managed, and installable in production without appexchange security review? Assume a beta tester wants to beta the managed app in production.

According to "Beta Versions of Managed Packages

Beta packages can be installed in sandbox or Developer Edition organizations, or test organizations furnished through the Environment Hub only. source: https://developer.salesforce.com/docs/atlas.en-us.packagingGuide.meta/packagingGuide/packaging_about_beta_packages.htm

Curious if there are any other options, but must be both managed (hidden) and skip appexchange security review (too soon)

3

There are two different things here.

  1. Beta Versions of Managed Packages(These can be private manage packages or App exchange managed packages. Private one's doesn't need to go through security review. EX: You can work with a vendor to build some functionality specific to your needs and they can do it as a private manage package for you.)
  2. AppExchange Security Review

Beta Versions of Managed Packages: A beta package is an early version of a managed package that is uploaded in a Managed - Beta state. The purpose of a Managed - Beta package is to allow the developer to test their application in different Salesforce organizations and to share the app with a pilot set of users for evaluation and feedback.

AppExchange Security Review: We want Lightning Platform to be a safe and reliable platform for our customer’s core business applications. To promote trust, all apps and components that are distributed to customers undergo a comprehensive security review. Your offering must meet or exceed the requirements set by our security review team before it can be distributed(Unless its a private managed packed specific to the vendor only that doesn't want it on app exchange). After approval, apps and components are also periodically retested.

To your question: No you can't install it in production org and your're not supposed to.

More about packages here : you can choose to make your package managed release and decide not to make it a public listing in app exchange. In your case your'e looking for private released manage packages

Note: Unfortunately i didn't find a source that says betas can't be or can be installed in production org!

  • Can you share your source for "No you can't install it in production org" ? Looking for any way to install a managed package into another production org without having to do the security review. You say "not supposed to" but the use-case for doing such is that the package makes use of a query that can only be performed in production. That is the package only works in production orgs because the data it queries only exists in production orgs. – Peter Noges Oct 5 '18 at 18:33
  • @PeterNoges You can turn your managed package into a released managed package and install it in a production org. You don't have to make it an app exchange listing. Only app exchange apps need security review. Will update the answer in a while – codeyinthecloud Oct 5 '18 at 18:39
  • Accepting answer with the assumption that this is true: " You can turn your managed package into a released managed package and install it in a production org. You don't have to make it an app exchange listing. " thank you! – Peter Noges Oct 5 '18 at 18:49
  • @PeterNoges Yes it's true as i have worked with couple of packages myself! – codeyinthecloud Oct 5 '18 at 18:50
  • were they private and did they skip appexchange security review? – Peter Noges Oct 5 '18 at 18:51

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.