Questions tagged [field-level-security]

Each Field within an Object has it's own CRUD (Create, Read, Update and Delete) security permissions applied to it. Field level security settings can make the security applied to a field more restrictive for a User's Profile beyond what Object level security would on it's own, but cannot make the security less restrictive.

Filter by
Sorted by
Tagged with
0 votes
0 answers
27 views

OWD and Profile Security Settings

I am facing an issue. 2 Custom objects Job(master) and Candidate (child). Job - parent (OWD private) (Custom Profile permission - Read permission only) Candidate - Child (OWD Controlled by parent) (...
Rashmi Shankhpal's user avatar
0 votes
1 answer
50 views

Field Level Permission Leakage to a profile

I have a Recruiter profile Which has field level permission for "Assigned Owner Field" is given only Visible Persmisson.But when a user Logins who is assigned Recruiter Profile is able to ...
AdityaSD's user avatar
-1 votes
1 answer
39 views

How to give access to only one field by a record owned by other user

I have a field that will only be edited when the process is finished, but the record owned by a person A and will be edited by a person B. I tryed a lot of things, but not work. I can’t change de owd. ...
Even CaSi's user avatar
0 votes
1 answer
79 views

Do I need to check FLS for each field when creating a new object record in apex?

If I am creating a new Contact record in apex, will the following code be sufficient for FLS/CRUD requirements in a security review, or will I need to check .isCreateable() for each field individually ...
lhh13's user avatar
  • 41
0 votes
1 answer
58 views

Validate OWD, with sharing, Profile, Permission Sets as Non - ADMIN user

I am trying to validate the OWD for an object that is Public/Read Write without Read permission at the object level for a specific profile user. To validate the results I created a new profile by ...
indrasen neelam's user avatar
1 vote
1 answer
472 views

Restrict access to specific fields when using Salesforce Integration User Licence on Standard objects (like Contacts)

By default, the Salesforce Integration User Licence doesn't provide access to a variety of standard objects (including Contacts and Accounts). You can extend the access for an integration to those ...
Nathan McQueen's user avatar
-2 votes
1 answer
86 views

is sharing settings of parent object can affects the lookup on child object?

My org account object OWD is private. And one of my Sales Rep. try to make an opportunity record and in lookup he wants the account record which he doesn't own. So , can he create opportunity related ...
avnish gupta's user avatar
-1 votes
1 answer
28 views

recordViewForm not pre-populating input fields for certain profiles in aura

I have an aura component with a recordViewForm that displays multiple fields from the Account object . These input fields are supposed to be pre-populated but are not displaying for a certain profile ...
confusedstudent's user avatar
1 vote
1 answer
2k views

Getting "An internal server error has occurred" while trying to change Object Field Permissions in Permission Set

I started getting the "An internal server error has occurred" error when I try to change Object Field Permission in a Permission Set in my Dev Org. So when I am in a Permission Set and try ...
Vitalii Dehnerys's user avatar
0 votes
0 answers
259 views

Is it possible to limit the fields you can filter on list views?

I ran into a very basic request at first that now I am struggling with, so hope to get my curiosity cleared with this query: I've limited the user's profile visibility in the Campaign object to not ...
Endrit Sino's user avatar
0 votes
1 answer
113 views

Cannot find field level permissions on standard field

I am having some SOQL queries fail when I include the field "Street" when querying for a Lead. This is the kind of query I'm running and the error message back: SELECT Id, Name, firstName, ...
jerfp's user avatar
  • 111
3 votes
1 answer
183 views

Is the User Mode approach to object and field security acceptable in a security review?

This Enforce User Mode for Database Operations looks by far the cleanest approach to implement the object and field-level security that is required to pass a Salesforce AppExchange Security Review. (...
Keith C's user avatar
  • 136k
0 votes
1 answer
431 views

How to determine fields for which a given profile does not have read permission

Full disclosure, my expertise is not on the Salesforce side, but in .NET and SQL; however, I've been tasked with assisting my company with a data migration from our original org to a new one. The in-...
JTennessen's user avatar
0 votes
0 answers
109 views

How can I restrict the user from Editing the Account Site Field of account Object using profile settings?

I am facing some issue here regarding field level security in Profile Sales Admin (Cloned From System Administrator) Object Level Security (Standard object permission) Account Object | Only Read ...
salesforce Newbie's user avatar
8 votes
1 answer
4k views

For SOQL queries, can "WITH USER_MODE" safely replace "WITH SECURITY_ENFORCED"?

When performing static or dynamic SOQL queries, should WITH SECURITY_ENFORCED now be replaced with WITH USER_MODE? Under what conditions, if any, should WITH SECURITY_ENFORCED still be used given ...
kennyc's user avatar
  • 327
0 votes
1 answer
241 views

How to set field level security on new field with simple_salesforce

I'm working in Python with the simple_salesforce library. I can create new fields on my Account and Contact objects, based on info in How to update object description using simple_salesforce. ...
David Goldfarb's user avatar
1 vote
0 answers
64 views

Checkmarx reporting wrong function name?

I just ran a Checkmarx scan today. It reported the following Apex Serious Security Risk: You can see the report is making a reference to isCreatable(). However, the name of the method in my Apex code ...
dev4life's user avatar
  • 430
0 votes
0 answers
198 views

Running Salesforce Code Analyzer for method version 3

I'm trying to run the SalesForce Code Analyzer on the new version 3 to a unique method called deleteQuery and the deleteQuery has a parameter Id here what I'm using: "sfdx scanner:run:dfa --...
Matheus Mello's user avatar
3 votes
0 answers
281 views

Best practices for pushing objects through DevOps?

We are using DevOps to push changes from sandboxes through to Production. Recently, I attempted to deploy some significant changes to an object. This includes: Creation of record types New fields ...
user avatar
0 votes
1 answer
718 views

Update field permission in permission set via Apex

I am trying to expose a REST API so the field permission of permission set(s) can be updated. I am trying to use MetadataService as below: @RestResource(urlMapping='/updateFieldPermission') global ...
वरुण's user avatar
1 vote
2 answers
345 views

Hide PII in Contact Record for a specific Profile

I created a "Read Only" custom profile. I have a "Private" Record Type for the Contact Object. I would like to hide PII fields in the "Private" contact records for the &...
Sergio Pedraza J.'s user avatar
0 votes
1 answer
2k views

Why can't I remove access for that specific field in a profile?

I have a custom object "Ticket" and I want to remove "Edit Access" for a standard profile "Standard Platform User" for the field "Approved To Start Work" but I ...
Fgh999's user avatar
  • 35
2 votes
1 answer
2k views

Guest User not able to get data from custom object

I am having simple custom object(Resources) with out any relation ship and having only one field (Resource Name) I am trying to access the data inside this custom object through APEX and the user is ...
SFDC buddy's user avatar
0 votes
0 answers
6k views

secure query included inaccessible field

I have a test method which I am trying to run from a particular profile. I am trying to access an object called Interaction and that profile has real all record permission. When I am running the first ...
Ishan's user avatar
  • 537
0 votes
0 answers
347 views

Fields been made non editable for a custom profile using Field level security, but user can still edit the field

We are using multiple profiles and needs to make few fields in Opportunity as view only - non editable field. We have made the required changed in field level security of the profile, and also done ...
Shweta's user avatar
  • 13
-2 votes
1 answer
1k views

How can I restrict access of an Account object field according to the user role? [closed]

It is pretty straightfoward. I want to hide/restrict some standard fields from the Account object based on the user's role. Is it possible to achieve? If so, how?
filipetrm's user avatar
1 vote
1 answer
3k views

Easiest way to grant edit access to a field for one user on case object without creating a new profile?

I was curious if anyone knew the easiest way to grant edit access to a field for one user on case object without creating a new profile? I am using an existing profile that has cred setup to allow ...
PowerUp's user avatar
  • 79
0 votes
1 answer
352 views

Read only field access for fields that are required

I have a "software license" object that should be readable by a customer community plus user except for one field that should be editable. Set up The default external sharing setting for ...
ThaNoob's user avatar
  • 149
0 votes
1 answer
310 views

Service Cloud field "PersonMailingAddress" not available in Marketing Cloud

We have set the Marketing Cloud Connector with Service Cloud, and when i want to select fields in the Account Object I do not find the PersonMailingAddress. The field is a combination of the mailing ...
Kaouetar's user avatar
3 votes
1 answer
6k views

WITH SECURITY_ENFORCED and Security.stripInaccessible in a single SOQL

Premise: I followed WITH SECURITY_ENFORCED, Security.stripInaccessible and comparison before designing my Apex class for querrying a few records. Doubt: I implemented my SOQL as Security....
user43598's user avatar
  • 457
1 vote
1 answer
147 views

Does SOAP callout to MetadataService not updating Schema before the end of transaction?

I'm using MetatadaService class from https://raw.githubusercontent.com/financialforcedev/apex-mdapi/master/apex-mdapi/src/classes/MetadataService.cls, which I have updated to 53.0 version. I'm trying ...
Mariia Illarionova's user avatar
0 votes
1 answer
318 views

Quick Action Visibility that references User checkbox doesn't work - appears to obey FLS?

Video demonstration: https://www.screencast.com/t/k55kD1BE4 Can a field that is hidden via FLS not be used to dynamically display a quick action under visibility on a custom object via App Builder ...
rmarq423's user avatar
  • 967
0 votes
0 answers
339 views

Changing field level permissions using REST API

My goal is to change field level permissions using REST API. I'm trying to use API's in order to create a new field on Lead object and then write to it. That's the API call I used in order to create a ...
Tamir Blecher's user avatar
0 votes
2 answers
7k views

What is isCreatable and isUpdateable for FIELDS in GUI

Where can I find and enforce "CREATABLE" and "UPDATEABLE" options for fields? Because, i am able to check the permissions in Apex(below statements) whereas, not able to find what ...
Rahul Allada's user avatar
2 votes
1 answer
791 views

Field level security pain in Apex tests when using packaging 2

In line with current security standards, we use with security_enforced extensively in our code. When doing CI (Continuous Integration) builds or working interactively we use sfdx force:user:permset:...
Keith C's user avatar
  • 136k
0 votes
2 answers
1k views

Why FirstName, LastName, Company field not found in FieldPermission query result?

I'm trying to get all fields and its read and write permission using below query SELECT Field, PermissionsRead, PermissionsEdit FROM FieldPermissions WHERE SObjectType ='Lead' AND parentId IN ( SELECT ...
Trimbak Jaiwal's user avatar
1 vote
0 answers
496 views

FLS and CRUD Check for Platform event and Meta Data DML

This might be a silly question, but don't want to get caught under security review. I have three questions/confirmations related to the security review FLS/CRUD Check Needed while publishing platform ...
Yaswanth Tikkisetti's user avatar
1 vote
1 answer
2k views

System Administrator can not see custom field even when FLS is configured correctly

My user has the System Administrator profile. When I go to Object Manager > Task > Fields and Relationships I can only see standard fields, but not any of the custom fields that this object has, ...
Emmanuel_M's user avatar
0 votes
1 answer
3k views

Why do Object Permissions in Permission Set override Field Permissions in this case?

I'm having an issue where I want a user with an assigned permission set to be able to see fields in an object ("Read" Permission in Object Level), but I want 2 fields to be hidden ("...
bonzi's user avatar
  • 155
12 votes
0 answers
424 views

Is there a reliable way to have WITH SECURITY_ENFORCED applied to all queries?

I've just gone through a biggish code base making sure that WITH SECURITY_ENFORCED is set on every query. Most were, but for some recent additions, it hadn't been included. For managed packages that ...
Keith C's user avatar
  • 136k
0 votes
1 answer
358 views

Not able to view few fields in campaign object in workbench

I am trying to enable the field-level permission of few fields of the Campaign object in salesforce so that I can view them in workbench but unfortunately, after enabling the field level access it is ...
Hunt's user avatar
  • 245
1 vote
1 answer
332 views

How to Determine Whether a Field Can Be Updated in Trigger Context

My question is basically the same as question 289297, if I correctly understand its OP's intent. I am posting my own in the hope of giving the issue more visibility, and also because it is not an ...
willeg's user avatar
  • 303
0 votes
1 answer
646 views

Managed Package overriding Field level Security access

I'm having this issue I have some custom fields imported from a managed package which I need to set to "Read only". I have set the FLS to read only on these fields for all users but when I ...
A.Amel's user avatar
  • 1
1 vote
1 answer
87 views

Field Level Security in Mulesoft using the user's sessionId in Salesforce connector

I am trying to perform a query in Anypoint Studio on the Account standard object. In the Salesforce standard connector 'Query' configuration I implemented the use of the user's sessionId. So if this ...
ARWarrior's user avatar
6 votes
1 answer
516 views

Why is stripInaccessible removing an M-D field?

I am building and LWC which uses lightning-record-edit-form to create an object, then calls an Apex controller method to create a list of M-D children of the newly created object. In my current test, ...
Jason Clark's user avatar
  • 11.8k
4 votes
3 answers
438 views

What is the risk of not performing Field Level Security (FLS) checks on internally developed Apex code?

I see more and more information about the importance of performing FLS checks before SOQL and DML operations, using the Security.stripInaccessible method, e.g. in the Winter '21 PD1 certification ...
MikeA's user avatar
  • 1,075
-2 votes
1 answer
440 views

How to fix FLS Create and FLS Update issue as per security scanner

String attachmentLinks = ''; if(!commAttList.isEmpty()){ Database.insert(commAttList,false); } return attachmentLinks;
Sonu Sagar's user avatar
2 votes
1 answer
835 views

Checkmarx Security Scanner FLS Issues

I run the checkmarx scanner for app and received ~250 FLS issues, which is understood, because when the app developed it simply was not checked. However I have noticed that there are lots of cases ...
Liron C's user avatar
  • 1,776
0 votes
1 answer
780 views

How can I get all custom fields that are Hidden from all profiles?

I got responsibility for another SF instance. The objects all have 100's of fields, of which many are hidden from all users (historically, they would not delete the field, but hide it from all users - ...
Saariko's user avatar
  • 5,600
0 votes
0 answers
106 views

Keeping a ViewAllData permissionset viewing all fields

I have a permissionset which I want to grant broad read-only access to nearly all fields and objects. I've granted the permissionset the ViewAllData permission already, but that permission does not ...
Charles Koppelman's user avatar