1

Is Field Level Security enforcement a requirement for querying tables like 'FiscalYearSettings' and 'Period'? or only for tables like Opportunity and Contact.

Our app need to display the fiscal year and period information. So I was wondering if we really need to enforce FLS for these tables.

Map<String, SObjectField> fields = Period.SObjectType.getDescribe().fields.getMap(); 
boolean isAccessible= fields.get('Number').getDescribe().isAccessible();

So do we need to check if number is accessible before displaying this information? Is this information always gonna be accessible for all the users?

3
  • You cannot set any CRUD/FLS on setup objects as is the case with FiscalYearSettings. When you say it's not accessible in Apex, what is the error you are getting? I would think you could always do a SOQL on FiscalYearSettings obejct.
    – Jayant Das
    Feb 19, 2019 at 16:46
  • I changed the question a bit, because I realized that it was actually returning true. But the main question is still open, do we really have to double check if the user can access it? Feb 19, 2019 at 17:18
  • 1
    I couldn't find any documentation around it, but that seems to be the case here. I would really then skip the double check in such scenarios.
    – Jayant Das
    Feb 19, 2019 at 17:27

0

You must log in to answer this question.

Browse other questions tagged .