Questions tagged [field-level-security]

Each Field within an Object has it's own CRUD (Create, Read, Update and Delete) security permissions applied to it. Field level security settings can make the security applied to a field more restrictive for a User's Profile beyond what Object level security would on it's own, but cannot make the security less restrictive.

57 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
12 votes
0 answers
424 views

Is there a reliable way to have WITH SECURITY_ENFORCED applied to all queries?

I've just gone through a biggish code base making sure that WITH SECURITY_ENFORCED is set on every query. Most were, but for some recent additions, it hadn't been included. For managed packages that ...
Keith C's user avatar
  • 136k
4 votes
0 answers
673 views

How to deploy FLS (Field Level Security) for all Objects & Fields in Scratch Org with application source push?

I'm trying to setup DX with Source code in Git and I'm pulling it from there and pushing it into a Scratch org. My Source code has multiple standard/custom objects with fields. But after Pushing code ...
VarunC's user avatar
  • 5,940
3 votes
1 answer
183 views

Is the User Mode approach to object and field security acceptable in a security review?

This Enforce User Mode for Database Operations looks by far the cleanest approach to implement the object and field-level security that is required to pass a Salesforce AppExchange Security Review. (...
Keith C's user avatar
  • 136k
3 votes
0 answers
281 views

Best practices for pushing objects through DevOps?

We are using DevOps to push changes from sandboxes through to Production. Recently, I attempted to deploy some significant changes to an object. This includes: Creation of record types New fields ...
user avatar
3 votes
0 answers
50 views

Is there an alternative solution to prevent other profiles from seeing a certain profile's activites?

I have an original profile A A group of users wanted to go from profile A to a new profile called profile B that is an exact mirror of profile A. Profile B wants to create activities and task, but ...
Cara Cini's user avatar
  • 109
3 votes
0 answers
129 views

Why would an app change Field Level Security settings en masse (unexpectedly)?

I installed an app (a managed package) to my org's Salesforce instance this morning, and shortly thereafter noticed that in FLS, visibility had been removed on dozens of important fields, across ...
OBerm's user avatar
  • 1,224
2 votes
0 answers
290 views

Opportunity field HasOpenActivity does not exist

I'm experiencing an error similar to this. With the same Error message, but another field. This shows up on my packaged visual force page, which is querying Opportunity.getDescribe().fields Field ...
itsmebasti's user avatar
  • 6,399
2 votes
0 answers
305 views

Checking FLS in apex code for another user

So basically what I need is to check field-level security in apex class but for some specific user, i.e. not for my current user (bunch of schema describe would do the trick here). So far I've ended ...
wesaw's user avatar
  • 3,010
2 votes
0 answers
360 views

Getting insufficient Privileges error on custom field only when in inputField or outputField

I have a custom field on the Service Contract that I am referencing on a Visualforce Page, which is getting this Insufficient Privileges error: Insufficient Privileges You do not have the level of ...
brezotom's user avatar
  • 1,077
2 votes
0 answers
240 views

Should we give the guest user profile the "view encrypted data" permission?

We've developed native VF/Apex code that allows us to send a link to a customer and have them securely view a PDF of their contract (contract is a VF page generated using data from fields in their ...
StartingAgain's user avatar
1 vote
0 answers
64 views

Checkmarx reporting wrong function name?

I just ran a Checkmarx scan today. It reported the following Apex Serious Security Risk: You can see the report is making a reference to isCreatable(). However, the name of the method in my Apex code ...
dev4life's user avatar
  • 430
1 vote
2 answers
345 views

Hide PII in Contact Record for a specific Profile

I created a "Read Only" custom profile. I have a "Private" Record Type for the Contact Object. I would like to hide PII fields in the "Private" contact records for the &...
Sergio Pedraza J.'s user avatar
1 vote
0 answers
496 views

FLS and CRUD Check for Platform event and Meta Data DML

This might be a silly question, but don't want to get caught under security review. I have three questions/confirmations related to the security review FLS/CRUD Check Needed while publishing platform ...
Yaswanth Tikkisetti's user avatar
1 vote
1 answer
87 views

Field Level Security in Mulesoft using the user's sessionId in Salesforce connector

I am trying to perform a query in Anypoint Studio on the Account standard object. In the Salesforce standard connector 'Query' configuration I implemented the use of the user's sessionId. So if this ...
ARWarrior's user avatar
1 vote
1 answer
1k views

Lock a Field on a Record based off of Profile

I have a field on a record that should only be editable by people with a certain profile. I can see that the read/edit is selected correctly under the field level security and I can see under the ...
Olivia's user avatar
  • 3,451
1 vote
0 answers
1k views

Can you modify global action fields accessibility by profile?

Is it possible to make fields in a global quick action editable to some profiles and read-only to other profiles? For Example, I want profile1 to have access to editing certain fields, but profile2 ...
Andrew Zhang's user avatar
1 vote
1 answer
184 views

FIeld hidden by FLS no longer returns records when search terms match?

When FLS hides a field from a user, the search results would still return the record if the search term matched. https://success.salesforce.com/answers?id=9063A000000DcyUQAS This no longer seems to ...
user75568's user avatar
1 vote
1 answer
600 views

Field Level Security on Email Template Not Working as Expected

I'm trying to hide specific fields in an email template for a specific profile. For this, I removed the field level access for fields I want to hide for the respective profile. After logging in as ...
Ali Noorani's user avatar
1 vote
0 answers
43 views

CRUD/FLS Enforcement for configuration tables like FiscalYearSettings

Is Field Level Security enforcement a requirement for querying tables like 'FiscalYearSettings' and 'Period'? or only for tables like Opportunity and Contact. Our app need to display the fiscal year ...
jvrdelafuente's user avatar
1 vote
1 answer
363 views

Changing Field Level Security for Connection User in Salesforce to Saleforce

We are using Salesforce to Salesforce to share an object (Object A) with the target org. In the target org, the trigger for the object A is invoked and based on the received record, tries to update ...
Payam Izad's user avatar
1 vote
1 answer
3k views

Setting default RecordType on the permission set

I am trying to use permission sets to dictate what record type people have. The idea is I only assign one record type per permission set. So when a user creates a record they don't get the record ...
tjcinnamon's user avatar
  • 1,620
1 vote
0 answers
182 views

FLS/CRUD Enforcement In Helper Classes

We have several controller classes that call out to helper classes to grab data or save data. This has resulted in a few questions... Is it sufficient to simply check all permissions in the ...
William Smith's user avatar
1 vote
0 answers
266 views

FLS Update for id field

In the case of record update, we will use the Id field to specify Id value. How to check FLS for Id field. I have already check isAccesible method. But still, it shows in the security scanner. Is it a ...
Monish's user avatar
  • 551
1 vote
1 answer
48 views

Control on fields restrict in detail page

Is there any wayout to restrict profiles to edit fields from detail page other than FLS and Page layout? I don't want to have a separate page layout for above case. Also can't change by FLS because ...
Testing_SFDC's user avatar
  • 2,940
1 vote
0 answers
496 views

How can I retrieve Field-Level Security Settings for Task object fields using MetaData API

I'm trying to retrieve Field-Level Security Settings for Task object standard fields like Comments or Name using MetaData API. I was trying a 'retrieve' request like this: <retrieve> <...
Pavel Furs's user avatar
0 votes
0 answers
27 views

OWD and Profile Security Settings

I am facing an issue. 2 Custom objects Job(master) and Candidate (child). Job - parent (OWD private) (Custom Profile permission - Read permission only) Candidate - Child (OWD Controlled by parent) (...
Rashmi Shankhpal's user avatar
0 votes
1 answer
50 views

Field Level Permission Leakage to a profile

I have a Recruiter profile Which has field level permission for "Assigned Owner Field" is given only Visible Persmisson.But when a user Logins who is assigned Recruiter Profile is able to ...
AdityaSD's user avatar
0 votes
1 answer
58 views

Validate OWD, with sharing, Profile, Permission Sets as Non - ADMIN user

I am trying to validate the OWD for an object that is Public/Read Write without Read permission at the object level for a specific profile user. To validate the results I created a new profile by ...
indrasen neelam's user avatar
0 votes
0 answers
259 views

Is it possible to limit the fields you can filter on list views?

I ran into a very basic request at first that now I am struggling with, so hope to get my curiosity cleared with this query: I've limited the user's profile visibility in the Campaign object to not ...
Endrit Sino's user avatar
0 votes
1 answer
113 views

Cannot find field level permissions on standard field

I am having some SOQL queries fail when I include the field "Street" when querying for a Lead. This is the kind of query I'm running and the error message back: SELECT Id, Name, firstName, ...
jerfp's user avatar
  • 111
0 votes
0 answers
109 views

How can I restrict the user from Editing the Account Site Field of account Object using profile settings?

I am facing some issue here regarding field level security in Profile Sales Admin (Cloned From System Administrator) Object Level Security (Standard object permission) Account Object | Only Read ...
salesforce Newbie's user avatar
0 votes
0 answers
198 views

Running Salesforce Code Analyzer for method version 3

I'm trying to run the SalesForce Code Analyzer on the new version 3 to a unique method called deleteQuery and the deleteQuery has a parameter Id here what I'm using: "sfdx scanner:run:dfa --...
Matheus Mello's user avatar
0 votes
0 answers
6k views

secure query included inaccessible field

I have a test method which I am trying to run from a particular profile. I am trying to access an object called Interaction and that profile has real all record permission. When I am running the first ...
Ishan's user avatar
  • 537
0 votes
0 answers
347 views

Fields been made non editable for a custom profile using Field level security, but user can still edit the field

We are using multiple profiles and needs to make few fields in Opportunity as view only - non editable field. We have made the required changed in field level security of the profile, and also done ...
Shweta's user avatar
  • 13
0 votes
1 answer
310 views

Service Cloud field "PersonMailingAddress" not available in Marketing Cloud

We have set the Marketing Cloud Connector with Service Cloud, and when i want to select fields in the Account Object I do not find the PersonMailingAddress. The field is a combination of the mailing ...
Kaouetar's user avatar
0 votes
0 answers
339 views

Changing field level permissions using REST API

My goal is to change field level permissions using REST API. I'm trying to use API's in order to create a new field on Lead object and then write to it. That's the API call I used in order to create a ...
Tamir Blecher's user avatar
0 votes
1 answer
358 views

Not able to view few fields in campaign object in workbench

I am trying to enable the field-level permission of few fields of the Campaign object in salesforce so that I can view them in workbench but unfortunately, after enabling the field level access it is ...
Hunt's user avatar
  • 245
0 votes
1 answer
646 views

Managed Package overriding Field level Security access

I'm having this issue I have some custom fields imported from a managed package which I need to set to "Read only". I have set the FLS to read only on these fields for all users but when I ...
A.Amel's user avatar
  • 1
0 votes
0 answers
106 views

Keeping a ViewAllData permissionset viewing all fields

I have a permissionset which I want to grant broad read-only access to nearly all fields and objects. I've granted the permissionset the ViewAllData permission already, but that permission does not ...
Charles Koppelman's user avatar
0 votes
1 answer
394 views

Error on upserting field permissions through apex

I am showing only permissionable and accessible fields of an object on the UI, then I am upserting the field permissions for the selected fields for custom permission set. It works fine for some ...
Avi Rai's user avatar
  • 999
0 votes
1 answer
51 views

Access Aggregated Field Level Security for Offline-first App

We are currently building a page layout renderer for an offline application that would allow end-user to create records and then sync the data once they get access to internet again. We need to ...
jpmonette's user avatar
  • 4,440
0 votes
1 answer
154 views

Disable Ability to Edit RecordType

I have a custom object with a Record Type that is read-only on the page layout but I can still make updates to the Record Type on the page. Why is this? I want to make the field un-editable, is there ...
Olivia's user avatar
  • 3,451
0 votes
1 answer
1k views

Contact Email field not queryable in SOQL

I'm querying contact email field in apex class and saving the return record inside a list. but when I debug the list queried then it does not show the email field. Below is the SOQL which I'm using ...
Jitesh Goel's user avatar
0 votes
1 answer
582 views

Extract profile's field level security

Is there a way to get a profile's field level security? I tried an soql query for FieldPermissions object but it's based off of permission sets so if there's no permission set with at least read ...
Peter Luo's user avatar
  • 140
0 votes
0 answers
158 views

Hiding Custom Setting data on front-end and through postman

We are using angular for front-end and Salesforce is being used for maintaining database. REST APIs have been written on Salesforce to communicate and fetch data to front-end. A custom profile has ...
Salesforce Learner's user avatar
0 votes
1 answer
149 views

Set field accessibility of Custom Setting's field

Can we set field level security / field accessibility of a Custom Setting's field?
Salesforce Learner's user avatar
0 votes
0 answers
685 views

Allow users to change Account owner (transfer record) but NOT edit Account Name?

We have a data model in which no changes can be made to fields on Accounts (Salesforce is not the system of record) but we would like users to be able to transfer ownership of accounts. So far we have ...
Lara Wasowski's user avatar
0 votes
0 answers
1k views

How to use MetadataService class using Metadata API through SOAP

I have a requirement to grant FLS to the certain fields on profile level. I want to achieve this using Salesforce Metadata API thru java. I came across the below code for updating FLS using ...
Arosh's user avatar
  • 23
0 votes
1 answer
134 views

How to grant FLS to an existing fields on profile basis through SOAP UI

How can I give field level security to the fields on profile basis I have referred sample on how to update the records but I'm not sure how this helps me on giving FLS to the fields. Because I need ...
Arosh's user avatar
  • 23
0 votes
1 answer
342 views

How to restrict lead records when i change the status field?

I am creating two users A and B using salesforce profiles. when user A create lead with status open it will show Admin user,User A and User B. Now my requirement is User A changed the status is ...
magi 001's user avatar