Questions tagged [field-level-security]
Each Field within an Object has it's own CRUD (Create, Read, Update and Delete) security permissions applied to it. Field level security settings can make the security applied to a field more restrictive for a User's Profile beyond what Object level security would on it's own, but cannot make the security less restrictive.
198
questions
1
vote
1
answer
1k
views
Add Field level security for person accounts field
Good day everyone, I am trying to add a field level security to first name, last name field for a person account. What I did is that I go to the user profile and I've tried to update the field level ...
- 1,243
0
votes
1
answer
2k
views
Show/hide standard component fields on Salesforce Communty based on Record Type of other field?
We would like to show/hide specific fields on our Salesforce Community based on the Record Type selected. The user will have the same security profile, so using FLS doesn't solve our problem.
For ...
- 4,947
0
votes
3
answers
934
views
Give a User access to two Fields on an Object
This seems like an easy thing that i'm absolutely pulling my hair out over.
I have a couple of back office workers that need access to edit Opportunities (two fields only) - Ive set up a page layout ...
- 137
0
votes
1
answer
38
views
Field-level editibility based on User field values
I only want users to be able to edit certain fields if they named in certain User lookup fields within the record. So the editability would be on a record-by-record basis.
In other words, if the ...
- 3,856
1
vote
1
answer
40
views
Is it possible to grant a profile to all the fields of one SObject?
We have created a new SObject with like 100 fields and create a new custom profile.
When we deploy to production we can't deploy the new profile. So we have created one in prod and do the field ...
- 13k
0
votes
0
answers
664
views
Allow users to change Account owner (transfer record) but NOT edit Account Name?
We have a data model in which no changes can be made to fields on Accounts (Salesforce is not the system of record) but we would like users to be able to transfer ownership of accounts.
So far we have ...
- 135
0
votes
1
answer
378
views
Updating FLS using metadata API through java
I wanted to update FLS for the custom fields in Profile level.
@datasert- Thanks for guided me on the right path, I have tried with the code below but after executed the code, changes are not ...
- 23
8
votes
1
answer
2k
views
Profile Field Level Security missing in XML when retrieve profile changes from scratch org
In our DX project we maintain 4 profiles (3 custom and the System Administrator profile). When a scratch org is created I can push the project and everything deploys correctly including the profiles ...
- 1,194
3
votes
3
answers
7k
views
How to pass Schema.SObjectType to a class method as an argument?
In an effort to write reusable code, I am trying to move my field-level security check code into a common class/methods.
Because the Schema.SObjectType is dynamic, I am looking for a way to pass ...
- 4,947
0
votes
0
answers
1k
views
How to use MetadataService class using Metadata API through SOAP
I have a requirement to grant FLS to the certain fields on profile level. I want to achieve this using Salesforce Metadata API thru java. I came across the below code for updating FLS using ...
- 23
0
votes
1
answer
132
views
How to grant FLS to an existing fields on profile basis through SOAP UI
How can I give field level security to the fields on profile basis
I have referred sample on how to update the records but I'm not sure how this helps me on giving FLS to the fields. Because I need ...
- 23
1
vote
2
answers
3k
views
How to check field accessiblity of a field that is related to the object being checked
While developing secure controller actions for a Lightning Component, I ran across an issue checking accessibility for an Account level attribute related a Contact.
For example:
Schema.SObjectType....
- 4,947
2
votes
1
answer
499
views
IsUpdateable returns true for Admin profile, even though I removed edit access
I am running checks on fields in my Apex controller, to see if the logged in user has update access on a field before allowing an update. While logged in as Admin, when I check IsUpdateable() in my ...
- 4,947
1
vote
2
answers
335
views
Conditional logic or throwing an exception when checking FLS and object CRUD?
When checking Field-Level Security or object CRUD in Apex within a managed package, is it required to use conditional access to prevent the given operation (for the purposes of passing the security ...
- 1,727
1
vote
2
answers
4k
views
Permission Set does not override Field Level Security?
According to this documentation, Permission Sets are defining the Field Level Security. But I'm experiencing odd behavior. I'm not having access to a field, that I should be able to edit, according to ...
- 6,359
11
votes
3
answers
1k
views
Security Review Preparation: Checking isAccessible on each object and field in complex SOQL queries for whole codebase
We are preparing our managed package for security review.
And as a part of this we need to enforce not just create/update/delete but also read (i.e. select) permissions. That means basically checking ...
- 2,990
1
vote
1
answer
3k
views
Setting default RecordType on the permission set
I am trying to use permission sets to dictate what record type people have. The idea is I only assign one record type per permission set. So when a user creates a record they don't get the record ...
- 1,620
2
votes
0
answers
277
views
Opportunity field HasOpenActivity does not exist
I'm experiencing an error similar to this. With the same Error message, but another field. This shows up on my packaged visual force page, which is querying Opportunity.getDescribe().fields
Field ...
- 6,359
0
votes
3
answers
1k
views
what is the best practice to make a field as Read-only among Page layouts Vs Field level security
what is the best practice to make a field as Read-only among Page layouts Vs Field level security.I'm bit confuse on this,please help us here.
- 493
0
votes
1
answer
880
views
Check FLS for a record the user does not have sharing access to
Is there any way to check FLS for a field on a record that the user does not have object (sharing) access to?
Object access is specifically not granted for this object because the user should not be ...
- 3,992
0
votes
1
answer
330
views
How to restrict lead records when i change the status field?
I am creating two users A and B using salesforce profiles. when user A create lead with status open it will show Admin user,User A and User B. Now my requirement is User A changed the status is ...
- 96
0
votes
1
answer
986
views
System Admin is not able to create record of Certain Data Type
We have recently configured new environments and I as a system administrator is trying to create an Account of Certain Record Type but still It gives me Insufficient Privileges error.I have checked ...
- 1,814
3
votes
1
answer
155
views
Strange issue with Account and contact fields on case object
For some reason the account and contact field on the case object is grayed out, my initial guess was FLS or page layout making the field read only but all have the fields open for my profile, not sure ...
- 1,762
2
votes
1
answer
2k
views
Drawbacks of Marketing Cloud field level encryption?
I have a client who has sensitive data that they will be connecting to Marketing cloud via Marketing cloud connector. I'm investigating whether field level encryption is the way forward once the data ...
- 21
1
vote
0
answers
180
views
FLS/CRUD Enforcement In Helper Classes
We have several controller classes that call out to helper classes to grab data or save data. This has resulted in a few questions...
Is it sufficient to simply check all permissions in the ...
- 163
2
votes
0
answers
292
views
Checking FLS in apex code for another user
So basically what I need is to check field-level security in apex class but for some specific user, i.e. not for my current user (bunch of schema describe would do the trick here).
So far I've ended ...
- 2,990
0
votes
1
answer
138
views
Show/Hide fields base on wheter a contact is VIP or not in layout and reports?
I have a requirement where I need to show or hide the phone number (standard field) if the contact is VIP or not (customm field) in standards layout. Only a specific profile will have access to see ...
- 473
1
vote
1
answer
342
views
Visualforce Lookup field not allowing entry for certain profiles
I have a visualforce form with 3 entry fields, 2 of which work for all profiles but one doesn't. It works for admin profile though. I've checked the VF security setting and field level security on ...
- 1,753
2
votes
1
answer
174
views
Criteria based field level security
For profile consultant I have billing information is object, client name, status is field picklist with pending, active, inactive.
I need to set client name field read only if status is active, ...
- 21
0
votes
2
answers
583
views
Open access to a particular user for a particular field of a particular record
A profile doesn't have access to any of the 5( Let's say A,B,C,D,E) fields in the object, however I have to allow a user in the profile to edit field A, that too for certain records.
Is it possible? ...
- 535
4
votes
1
answer
220
views
Unable to simulate FLS/CRUD security leaks although no checks in code
I recently checked my managed package using the Force.com Security chechker (by Checkmarx) and the tool listed a few CRUD and FLS issues in my Controller classes.
Before fixing them I tried to better ...
- 37.3k
1
vote
0
answers
245
views
FLS Update for id field
In the case of record update, we will use the Id field to specify Id value. How to check FLS for Id field. I have already check isAccesible method. But still, it shows in the security scanner. Is it a ...
- 551
2
votes
0
answers
352
views
Getting insufficient Privileges error on custom field only when in inputField or outputField
I have a custom field on the Service Contract that I am referencing on a Visualforce Page, which is getting this Insufficient Privileges error:
Insufficient Privileges You do not have the level of ...
- 1,057
1
vote
1
answer
289
views
How to cache CRUD/FLS access checks
In the Connect to Salesforce with Server-Side Controllers module on trailhead, when advising of the requirement to do CRUD/FLS checks, the author cautions:
Also, describe calls are expensive. If ...
- 203
1
vote
1
answer
2k
views
How to find out whether a field level security is assigned through permission set or profile
I want to know whether the field level security is assigned through profile or permission set through SOQL.
- 177
1
vote
1
answer
89
views
Trying to resolve the security scanner issue creates problem while installing the managed package?
The following class inserts Data in a custom object(SAPConfiguration__c),when a user enters data in a Visualforce page.
In order to rectify the Security Scanner issue(Query: FLS Create) I have added ...
- 1,456
6
votes
2
answers
7k
views
Field-Level Security (FLS) in Lightning Components
I'm going through CRUD and Field-Level Security (FLS) from Lightning Components Developer Guide, and the following code for Field-Level Security validation doesn't make any sense for me in terms of ...
- 3,094
0
votes
1
answer
312
views
Non-Read-Only field giving error with trigger that it is read-only
I'm getting an error on my trigger that it cannot change the value of a field because it is read-only. The problem is, it is not Read-Only. Is there a setting somewhere or some information about the ...
0
votes
0
answers
68
views
Visualforce Input Field Issue?
I have this situation: One common apex:inputField, but at my org(production) this field it's not showing and at sandbox this works. Anyone know why?
An example of my field :
<apex:inputField id="...
- 131
0
votes
1
answer
27
views
Giving Edit access to the opportunity owner's Reporting Executive [closed]
I am new to Salesforce.I have created a custom field on opportunity.Requirement is:This field should be visible to all users under a particular profile but should be ediatable only by the opportunity'...
- 33
0
votes
2
answers
1k
views
Check which permissionsets makes a field read-only or editable
I have a field for eg: testField__c on some object testObject__c.I have given the features of editable or readonly to this field based on permissionsets.Now I have to check,which permissionsets has ...
- 583
0
votes
1
answer
1k
views
Custom field as made Read only via Field level security and same Custom field as Required in Page layout
A custom field is made Read only from the Field level security and Required from Page layout. I can see the Field as Read Only for the User. Why it is happening? Is it because the Field level security ...
- 1,807
4
votes
1
answer
2k
views
How does Read-Only field level security affects Apex and Workflows
Let's say I have a Profile in the system which has a particular Field of an Object set as Read-Only.
How does this affect my Apex code and Workflows if they are executed by a User with this Profile? ...
- 5,503
12
votes
2
answers
4k
views
Newbie Q: Is "Field Level Security" the same as "Field Accessibility"?
There are two buttons that seem very similar when viewing the detial page for an object: Set Field Level Security and View Field Accessibility. They both seem to allow you to set the field level ...
- 355
0
votes
1
answer
323
views
relationship between readable, visible and read only'
In a profile I can see:
<fieldPermissions>
<editable>true</editable>
<field>Time_Log__c.Date__c</field>
<readable>true</readable>
</...
- 383
3
votes
2
answers
567
views
Manually Enforce CRUD and FLS in trigger handler and Ajax to pass salesforce security review
I want to pass salesforce security review in my app. I want to make sure that all the known issues fixed before submission. I have Enforced CRUD and FLS in to all the apex classes. But i am not sure ...
- 901
1
vote
1
answer
139
views
Deploying Fields (new or pre-existing) - Security
I haven't been doing Deployments for over a year now in Salesforce (my role, and company, have significantly changed). However, where I now work, I have developers telling me they CAN NOT DEPLOY ...
- 4,674
1
vote
1
answer
3k
views
Process Builder user has write access to read only field [duplicate]
We have a process built with Process Builder, that updates a customer field on Account from a related object. When the related object is created, it copies a date from the related object, to a date ...
- 4,947
21
votes
4
answers
30k
views
Does Process Builder run with System permissions or User permissions?
Regarding field-level security, does Lightning Process Builder run as system-level permissions or user? That is:
Can I trigger an update to a field that the current user cannot edit?
Can I filter ...
- 4,232
7
votes
3
answers
834
views
Platform Encryption vs. FLS
What would I get from Platform Encryption that I cannot get from Field Level Security?
We are investigating whether or not to invest in Salesforce Shield, so I want to better understand the ...
- 149k