4

I scan my code, and I received a Serious issue:

<apex:inputText value="{!ld.Name}" />

I have applied FLS as the guide here : http://wiki.developerforce.com/page/Enforcing_CRUD_and_FLS

<apex:inputText value="{!ld.Name}"  rendered="{!$ObjectType.Lead.fields.Name.Updateable}"/>

but it did not work.

1 Answer 1

4

Using apex:inputText and apex:inputTextArea does not enforce FLS automatically.

Please note that using other input tags such as apex:inputText or apex:inputTextArea with SObject fields indicate to VisualForce that the fields should not be treated as SObject fields and prevent the platform to automatically enforcing FLS.

Is there a reason you would not want to use apex:inputfield? This would automatically enforce FLS

When rendering VisualForce pages, the platform will automatically enforce CRUD and FLS when the developer references SObjects and SObject fields directly in the VisualForce page.

1
  • how about property ? we can not put property into inputField. Feb 13, 2014 at 7:04

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .