This might be a silly question, but don't want to get caught under security review.
I have three questions/confirmations related to the security review
- FLS/CRUD Check Needed while publishing platform event?
- FLS/CRUD Check Needed while Deploying Metadata?
- FLS/CRUD Check Needed for Custom Setting
getInstanceWe have checked CRUD/FLS for custom setting when we queried
At the end of the day, we couldn't able to provide FLS/CRUD permissions for custom meta data and platform event. As long as salesforce is taking care of the dmls, do we need to check any CRUD/FLS or should we provide false positive stating these?
What would be the expert recommended solution on the above, any suggestions would be much appreciated