How to disable CRUD/FLS check from fflib domain layer for only some specific flows. By default it is enabled for all flows using base class

Question

1- I am using fflib for my managed package.

2- By default CRUD/FLS are enabled for all domain/selector flows (Using Base class)

3- In a specific method which is used by site guest users, I want to bypass CRUD/FLS check.

4- "Configuration.disableTriggerCRUDSecurity();" is not working in a domain specific method.

5- I know same is possible in Selector layer (See Accepted Answer) . I want same thing in domain layer.

How to By pass CRUD/FLS from Domain layer in any specific Flow?

Sample Code which should work but it is not working

public inherited sharing abstract class BaseDomain extends fflib_SObjectDomain {
    public BaseDomain(List<SObject> records) {
        super(records);
        Configuration.enforceTriggerCRUDSecurity();
    }
}

public inherited sharing class ABCs extends BaseDomain implements IABCs{

    public ABCs(List<ABC__c> abcs) {
        super(abcs);
    }
    ..........................
    public list<Boolean> incrementViewCount(fflib_ISObjectUnitOfWork uow){
        Configuration.disableTriggerCRUDSecurity();
        //Business Logic
        for(SObject urlObj:Records){
            ABC__c abc = (ABC__c)urlObj;
            Double viewCount = 0;
            if(abc.TotalView__c != null){
                dataDumpViewCount = abc.TotalView__c;
            }
            abc.TotalView__c = dataDumpViewCount +1;
            uow.registerDirty(abc);
        }
    }
}

public with sharing class ABCServiceImpl implements IABCServiceService{

    public void createViewCountByGuestUser(list<ID> abcIds){
        
        new ElevatedViewStatus().saveViewStatus(abcIds);
    }

    private without sharing class ElevatedViewStatus{
        public ViewStatusBO  saveViewStatus(list<ID> abcIds){
            fflib_ISObjectUnitOfWork uow = Application.UnitOfWork.newInstance();
            .........................
            IABCs abcsDomain = (IABCs) Application.Domain.newInstance(abcIds);
            abcsDomain.incrementViewCount(uow);
            ........................
        }
    }
}

Answer 1

I have find one workaround for my requirement.

My flow is

1. Create a static variable isSupportCRUD with default value true in Base domain class.
2. Create a new method disableTriggerCRUDSecurity() in the BaseDomain which changes isSupportCRUD value from true to false.
3. Now change constructor code of Domain Class(ABCs) to disable CRUD according to the value of isSupportCRUD in which you like to disable CRUD security check at runtime.
4. Remove the Configuration.disableTriggerCRUDSecurity() from Domain method (From my question code)
5. Call Domain.disableTriggerCRUDSecurity() method before instancing Domain class

Sample Code

public inherited sharing abstract class BaseDomain extends fflib_SObjectDomain {
public static Boolean isSupportCRUD = true;
public BaseDomain(List<SObject> records) {
    super(records);
    Configuration.enforceTriggerCRUDSecurity();
}
public static void disableTriggerCRUDSecurity(){
    isSupportCRUD = false;
 }
}

public inherited sharing class ABCs extends BaseDomain implements IABCs{
public ABCs(List<ABC__c> abcs) {
    super(abcs);
    if(!isSupportCRUD){
       Configuration.disableTriggerCRUDSecurity();
    }
}

..........................
public list<Boolean> incrementViewCount(fflib_ISObjectUnitOfWork uow){
    //Business Logic
    for(SObject urlObj:Records){
        ABC__c abc = (ABC__c)urlObj;
        Double viewCount = 0;
        if(abc.TotalView__c != null){
            dataDumpViewCount = abc.TotalView__c;
        }
        abc.TotalView__c = dataDumpViewCount +1;
        uow.registerDirty(abc);
    }
  }
}

public with sharing class ABCServiceImpl implements IABCService{
public void createViewCountByGuestUser(list<ID> abcIds){
    new ElevatedViewStatus().saveViewStatus(abcIds);
}

private without sharing class ElevatedViewStatus{
    public ViewStatusBO  saveViewStatus(list<ID> abcIds){
        fflib_ISObjectUnitOfWork uow = Application.UnitOfWork.newInstance();
        .........................
        ABCs.disableTriggerCRUDSecurity();
        IABCs abcsDomain = (IABCs) Application.Domain.newInstance(abcIds);
        abcsDomain.incrementViewCount(uow);
        ........................
    }
 }
}

Answer 2

As an alternate solution I disable crud in the unit of work by using without sharing in the IDML interface, and use it in my UOW instance

Usage:

 fflib_SObjectUnitOfWork uow = new fflib_SObjectUnitOfWork(
        new List<SObjectType> { Account.SObjectType, 
                                Opportunity.SObjectType, 
                                Case.SObjectType},
        new Disable_CRUD_UOW()
    );

IDML class:

public without sharing class Disable_CRUD_UOW implements 
   fflib_SObjectUnitOfWork.IDML{
        public virtual void dmlInsert(List<SObject> objList)
        {
            insert objList;
        }
        public virtual void dmlUpdate(List<SObject> objList)
        {
            update objList;
        }
        public virtual void dmlDelete(List<SObject> objList)
        {
            delete objList;
        }
        public virtual void eventPublish(List<SObject> objList)
        {
            EventBus.publish(objList);
        }
        public virtual void emptyRecycleBin(List<SObject> objList)
        {
            if (objList.isEmpty())
            {
                return;
            }
    
            Database.emptyRecycleBin(objList);
        }
    }

this will not check for crud and can be used when you want the dml to be in system context, add this wherever you may. Rest of the usage of unit work remains same after the declaration specified in the "Usage" section.