Questions tagged [field-level-security]
Each Field within an Object has it's own CRUD (Create, Read, Update and Delete) security permissions applied to it. Field level security settings can make the security applied to a field more restrictive for a User's Profile beyond what Object level security would on it's own, but cannot make the security less restrictive.
56
questions with no upvoted or accepted answers
18
votes
2
answers
910
views
How does Salesforce handle Managed Package Licences between Packages?
So I have a managed package we'll call Package Core. It has various components, incl custom fields on Account and Contact. It is licensed by user, and works as expected - no license, no access to the ...
- 13.5k
12
votes
0
answers
387
views
Is there a reliable way to have WITH SECURITY_ENFORCED applied to all queries?
I've just gone through a biggish code base making sure that WITH SECURITY_ENFORCED is set on every query. Most were, but for some recent additions, it hadn't been included. For managed packages that ...
- 135k
3
votes
1
answer
166
views
Is the User Mode approach to object and field security acceptable in a security review?
This Enforce User Mode for Database Operations looks by far the cleanest approach to implement the object and field-level security that is required to pass a Salesforce AppExchange Security Review.
(...
- 135k
3
votes
0
answers
241
views
Best practices for pushing objects through DevOps?
We are using DevOps to push changes from sandboxes through to Production.
Recently, I attempted to deploy some significant changes to an object. This includes:
Creation of record types
New fields
...
user123801
3
votes
0
answers
48
views
Is there an alternative solution to prevent other profiles from seeing a certain profile's activites?
I have an original profile A
A group of users wanted to go from profile A to a new profile called profile B that is an exact mirror of profile A.
Profile B wants to create activities and task, but ...
- 109
3
votes
0
answers
637
views
How to deploy FLS (Field Level Security) for all Objects & Fields in Scratch Org with application source push?
I'm trying to setup DX with Source code in Git and I'm pulling it from there and pushing it into a Scratch org. My Source code has multiple standard/custom objects with fields. But after Pushing code ...
- 5,900
3
votes
0
answers
126
views
Why would an app change Field Level Security settings en masse (unexpectedly)?
I installed an app (a managed package) to my org's Salesforce instance this morning, and shortly thereafter noticed that in FLS, visibility had been removed on dozens of important fields, across ...
- 1,224
2
votes
0
answers
277
views
Opportunity field HasOpenActivity does not exist
I'm experiencing an error similar to this. With the same Error message, but another field. This shows up on my packaged visual force page, which is querying Opportunity.getDescribe().fields
Field ...
- 6,359
2
votes
0
answers
292
views
Checking FLS in apex code for another user
So basically what I need is to check field-level security in apex class but for some specific user, i.e. not for my current user (bunch of schema describe would do the trick here).
So far I've ended ...
- 2,990
2
votes
0
answers
352
views
Getting insufficient Privileges error on custom field only when in inputField or outputField
I have a custom field on the Service Contract that I am referencing on a Visualforce Page, which is getting this Insufficient Privileges error:
Insufficient Privileges You do not have the level of ...
- 1,057
2
votes
0
answers
236
views
Should we give the guest user profile the "view encrypted data" permission?
We've developed native VF/Apex code that allows us to send a link to a customer and have them securely view a PDF of their contract (contract is a VF page generated using data from fields in their ...
- 347
1
vote
0
answers
59
views
Checkmarx reporting wrong function name?
I just ran a Checkmarx scan today. It reported the following Apex Serious Security Risk:
You can see the report is making a reference to isCreatable(). However, the name of the method in my Apex code ...
- 372
1
vote
2
answers
291
views
Hide PII in Contact Record for a specific Profile
I created a "Read Only" custom profile. I have a "Private" Record Type for the Contact Object. I would like to hide PII fields in the "Private" contact records for the &...
1
vote
0
answers
449
views
FLS and CRUD Check for Platform event and Meta Data DML
This might be a silly question, but don't want to get caught under security review.
I have three questions/confirmations related to the security review
FLS/CRUD Check Needed while publishing platform ...
1
vote
1
answer
84
views
Field Level Security in Mulesoft using the user's sessionId in Salesforce connector
I am trying to perform a query in Anypoint Studio on the Account standard object. In the Salesforce standard connector 'Query' configuration I implemented the use of the user's sessionId. So if this ...
- 33
1
vote
1
answer
1k
views
Lock a Field on a Record based off of Profile
I have a field on a record that should only be editable by people with a certain profile. I can see that the read/edit is selected correctly under the field level security and I can see under the ...
- 3,431
1
vote
0
answers
1k
views
Can you modify global action fields accessibility by profile?
Is it possible to make fields in a global quick action editable to some profiles and read-only to other profiles?
For Example, I want profile1 to have access to editing certain fields, but profile2 ...
- 23
1
vote
1
answer
174
views
FIeld hidden by FLS no longer returns records when search terms match?
When FLS hides a field from a user, the search results would still return the record if the search term matched.
https://success.salesforce.com/answers?id=9063A000000DcyUQAS
This no longer seems to ...
- 11
1
vote
1
answer
550
views
Field Level Security on Email Template Not Working as Expected
I'm trying to hide specific fields in an email template for a specific profile. For this, I removed the field level access for fields I want to hide for the respective profile. After logging in as ...
- 11
1
vote
0
answers
42
views
CRUD/FLS Enforcement for configuration tables like FiscalYearSettings
Is Field Level Security enforcement a requirement for querying tables like 'FiscalYearSettings' and 'Period'? or only for tables like Opportunity and Contact.
Our app need to display the fiscal year ...
- 133
1
vote
1
answer
346
views
Changing Field Level Security for Connection User in Salesforce to Saleforce
We are using Salesforce to Salesforce to share an object (Object A) with the target org. In the target org, the trigger for the object A is invoked and based on the received record, tries to update ...
- 11
1
vote
1
answer
3k
views
Setting default RecordType on the permission set
I am trying to use permission sets to dictate what record type people have. The idea is I only assign one record type per permission set. So when a user creates a record they don't get the record ...
- 1,620
1
vote
0
answers
180
views
FLS/CRUD Enforcement In Helper Classes
We have several controller classes that call out to helper classes to grab data or save data. This has resulted in a few questions...
Is it sufficient to simply check all permissions in the ...
- 163
1
vote
0
answers
245
views
FLS Update for id field
In the case of record update, we will use the Id field to specify Id value. How to check FLS for Id field. I have already check isAccesible method. But still, it shows in the security scanner. Is it a ...
- 551
1
vote
1
answer
45
views
Control on fields restrict in detail page
Is there any wayout to restrict profiles to edit fields from detail page other than FLS and Page layout?
I don't want to have a separate page layout for above case. Also can't change by FLS because ...
- 2,940
1
vote
0
answers
490
views
How can I retrieve Field-Level Security Settings for Task object fields using MetaData API
I'm trying to retrieve Field-Level Security Settings for Task object standard fields like Comments or Name using MetaData API.
I was trying a 'retrieve' request like this:
<retrieve>
<...
- 11
0
votes
1
answer
43
views
Validate OWD, with sharing, Profile, Permission Sets as Non - ADMIN user
I am trying to validate the OWD for an object that is Public/Read Write without Read permission at the object level for a specific profile user. To validate the results I created a new profile by ...
- 113
0
votes
0
answers
149
views
Is it possible to limit the fields you can filter on list views?
I ran into a very basic request at first that now I am struggling with, so hope to get my curiosity cleared with this query:
I've limited the user's profile visibility in the Campaign object to not ...
- 954
0
votes
1
answer
71
views
Cannot find field level permissions on standard field
I am having some SOQL queries fail when I include the field "Street" when querying for a Lead. This is the kind of query I'm running and the error message back:
SELECT Id, Name, firstName, ...
- 111
0
votes
0
answers
79
views
How can I restrict the user from Editing the Account Site Field of account Object using profile settings?
I am facing some issue here regarding field level security in Profile
Sales Admin (Cloned From System Administrator)
Object Level Security (Standard object permission) Account Object | Only Read ...
0
votes
0
answers
181
views
Running Salesforce Code Analyzer for method version 3
I'm trying to run the SalesForce Code Analyzer on the new version 3 to a unique method called deleteQuery and the deleteQuery has a parameter Id here what I'm using: "sfdx scanner:run:dfa --...
0
votes
0
answers
5k
views
secure query included inaccessible field
I have a test method which I am trying to run from a particular profile. I am trying to access an object called Interaction and that profile has real all record permission.
When I am running the first ...
- 537
0
votes
0
answers
308
views
Fields been made non editable for a custom profile using Field level security, but user can still edit the field
We are using multiple profiles and needs to make few fields in Opportunity as view only - non editable field. We have made the required changed in field level security of the profile, and also done ...
- 13
0
votes
1
answer
262
views
Service Cloud field "PersonMailingAddress" not available in Marketing Cloud
We have set the Marketing Cloud Connector with Service Cloud, and when i want to select fields in the Account Object I do not find the PersonMailingAddress.
The field is a combination of the mailing ...
- 33
0
votes
0
answers
321
views
Changing field level permissions using REST API
My goal is to change field level permissions using REST API.
I'm trying to use API's in order to create a new field on Lead object and then write to it.
That's the API call I used in order to create a ...
0
votes
1
answer
319
views
Not able to view few fields in campaign object in workbench
I am trying to enable the field-level permission of few fields of the Campaign object in salesforce so that I can view them in workbench but unfortunately, after enabling the field level access it is ...
- 235
0
votes
1
answer
611
views
Managed Package overriding Field level Security access
I'm having this issue
I have some custom fields imported from a managed package which I need to set to "Read only".
I have set the FLS to read only on these fields for all users but when I ...
- 1
0
votes
0
answers
77
views
Keeping a ViewAllData permissionset viewing all fields
I have a permissionset which I want to grant broad read-only access to nearly all fields and objects. I've granted the permissionset the ViewAllData permission already, but that permission does not ...
- 4,232
0
votes
1
answer
358
views
Error on upserting field permissions through apex
I am showing only permissionable and accessible fields of an object on the UI, then I am upserting the field permissions for the selected fields for custom permission set. It works fine for some ...
- 999
0
votes
1
answer
49
views
Access Aggregated Field Level Security for Offline-first App
We are currently building a page layout renderer for an offline application that would allow end-user to create records and then sync the data once they get access to internet again.
We need to ...
- 4,400
0
votes
1
answer
108
views
Disable Ability to Edit RecordType
I have a custom object with a Record Type that is read-only on the page layout but I can still make updates to the Record Type on the page. Why is this? I want to make the field un-editable, is there ...
- 3,431
0
votes
1
answer
1k
views
Contact Email field not queryable in SOQL
I'm querying contact email field in apex class and saving the return record inside a list. but when I debug the list queried then it does not show the email field.
Below is the SOQL which I'm using ...
- 517
0
votes
1
answer
475
views
Extract profile's field level security
Is there a way to get a profile's field level security?
I tried an soql query for FieldPermissions object but it's based off of permission sets so if there's no permission set with at least read ...
- 140
0
votes
0
answers
156
views
Hiding Custom Setting data on front-end and through postman
We are using angular for front-end and Salesforce is being used for maintaining database. REST APIs have been written on Salesforce to communicate and fetch data to front-end. A custom profile has ...
0
votes
1
answer
145
views
Set field accessibility of Custom Setting's field
Can we set field level security / field accessibility of a Custom Setting's field?
0
votes
0
answers
664
views
Allow users to change Account owner (transfer record) but NOT edit Account Name?
We have a data model in which no changes can be made to fields on Accounts (Salesforce is not the system of record) but we would like users to be able to transfer ownership of accounts.
So far we have ...
- 135
0
votes
0
answers
1k
views
How to use MetadataService class using Metadata API through SOAP
I have a requirement to grant FLS to the certain fields on profile level. I want to achieve this using Salesforce Metadata API thru java. I came across the below code for updating FLS using ...
- 23
0
votes
1
answer
132
views
How to grant FLS to an existing fields on profile basis through SOAP UI
How can I give field level security to the fields on profile basis
I have referred sample on how to update the records but I'm not sure how this helps me on giving FLS to the fields. Because I need ...
- 23
0
votes
1
answer
330
views
How to restrict lead records when i change the status field?
I am creating two users A and B using salesforce profiles. when user A create lead with status open it will show Admin user,User A and User B. Now my requirement is User A changed the status is ...
- 96
0
votes
2
answers
583
views
Open access to a particular user for a particular field of a particular record
A profile doesn't have access to any of the 5( Let's say A,B,C,D,E) fields in the object, however I have to allow a user in the profile to edit field A, that too for certain records.
Is it possible? ...
- 535