1

When FLS hides a field from a user, the search results would still return the record if the search term matched.

https://success.salesforce.com/answers?id=9063A000000DcyUQAS

This no longer seems to be the case, can anyone else confirm? I tried a custom phone field visible only to Admins and while the records return on Search for me, it doesn't for a user where this field is hidden via FLS.

3
  • Not in a position to test right now, but I wouldn't be surprised as it's a bit of a security hole. You could work out somebody's phone number that you didn't have access to through brute force guess-work.
    – Matt Lacey
    Oct 28, 2019 at 3:29
  • I haven't tested, but this would contradict the documentation, which states: Field-level security doesn’t prevent searching on the values in a field. When search terms match on field values protected by field-level security, the associated records are returned in the search results without the protected fields and their values. Oct 28, 2019 at 4:45
  • I agree its a bit of a security hole but its in the documentation as linked, which is what threw me off
    – user75568
    Oct 29, 2019 at 1:25

1 Answer 1

0

This was a Known Issue that was fixed in 2019.

After the fix, Global Search will no longer return matched records that are hidden by Field Level Security (FLS)

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .