Questions tagged [field-level-security]
Each Field within an Object has it's own CRUD (Create, Read, Update and Delete) security permissions applied to it. Field level security settings can make the security applied to a field more restrictive for a User's Profile beyond what Object level security would on it's own, but cannot make the security less restrictive.
198
questions
7
votes
1
answer
525
views
Schema.SobjectField Access Changed in API v34.0 (Summer '15)
While I was working on a Visualforce page which has some similar functionality to another page that has already been developed in the past into one of my other orgs, I decided to re-use the same code ...
- 16.2k
2
votes
1
answer
827
views
Attempt to de-reference a null object on when calling Schema.getGlobalDescribe().get(sObjName).getDescribe();
I receive an error on a web page : Attempt to de-reference a null object
Schema.DescribeSObjectResult sObjResult = GLOBAL_DESCRIBE.get(sObjName).getDescribe();
First i thought that my user doesn't ...
- 159
18
votes
2
answers
912
views
How does Salesforce handle Managed Package Licences between Packages?
So I have a managed package we'll call Package Core. It has various components, incl custom fields on Account and Contact. It is licensed by user, and works as expected - no license, no access to the ...
- 13.5k
3
votes
2
answers
2k
views
How do you configure Field Level Security for Custom settings in managed package?
I can't seem to find this configuration in the User Profile settings.
- 107
0
votes
1
answer
1k
views
How to update field-level-security using Metadata-API via Apex (using MetadataService.cls)
I'm trying to grant FLS access using MetadataService.cls (found here https://github.com/financialforcedev/apex-mdapi)
Assume there is a field Test__c on Account with no FLS permissions granted to ...
- 28.3k
2
votes
1
answer
2k
views
Profile cloning and access settings on new profile
Is there any way to clone profile and allow that profile to have all field level access as previous(parent) profile?
Scenario is, we haven't set some objects/fields as global on OWD, now when we ...
- 507
0
votes
2
answers
1k
views
Set Field Level Security for Standard Fields Using the Metadata API
Can I set Field Level Security for Standard fields using the Metadata API via Eclipse?
To my knowledge this is not possible, but there are some smart cookies on here who may have a solution or ...
- 1,068
0
votes
1
answer
68
views
Website field won't show on page layout
I added the standard Website field to the page layout, but it won't show up.
Googled this quite a bit and found this SO question about standard fields not showing up but it is not the same.
- 1,613
0
votes
1
answer
138
views
Does Running User FLS affect Push Topic notifications in Streaming API?
I have a push topic query that includes a field hidden from most users in the where clause. My observation is that a notification only occurs when the running user has FLS read or write access to the ...
- 1,420
1
vote
1
answer
2k
views
Update field-level security using APEX
Can an apex code perform an bulk update on a field-level security to visible
I have moved few objects and each objects has almost dozens of fields and its very time consuming to go on each field and ...
- 6,934
5
votes
1
answer
582
views
Criteria-based field-level security
I have two Departments who each have different sells, based on a custom object. I would like for Dept A to only see certain fields in the sells which are created in Dept B - and vice versa.
If I ...
- 3,856
1
vote
1
answer
302
views
"Who sees what" videos on Youtube now mostly private. Other way to view them?
Another exam coming up and again I am trying to understand the subtleties of object and record access (for me the most complicated thing in Salesforce). There is an enlightening Salesforce video ...
- 3,984
1
vote
1
answer
45
views
Control on fields restrict in detail page
Is there any wayout to restrict profiles to edit fields from detail page other than FLS and Page layout?
I don't want to have a separate page layout for above case. Also can't change by FLS because ...
- 2,940
3
votes
1
answer
2k
views
Workflows and field-level security
I've got a workflow that triggers a field update (checkbox). I would like to restrict this checkbox to read-only for everybody except System Administrator. However, if a non-Sys Admin causes the ...
- 33
1
vote
1
answer
4k
views
Is there a way to limit access to Attachments based on the Subject field?
My organization would like to have the ability to restrict the viewing permissions of certain user in regards to some of the Attachments we add to specific objects. For example, we'd like all ...
- 49
1
vote
1
answer
278
views
INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY in Many to Many
I have Accounts and Contacts as M:M in the system and a simple apex code that creates junction objects.
@RemoteAction
global static Boolean addContacts(String[] arr, String acc_id){
if(...
- 163
2
votes
1
answer
2k
views
How to disable or readonly lookup field in standard page
EDIT:
On a standard page. NOT using VF page
Is it possible to write a validation rule or any approach to make a field disabled once the user save?
I have a page with couple of fields including ...
- 6,934
3
votes
1
answer
339
views
What determines the default FLS settings when creating a new field
In step 3 of the create new field wizard, you are presented with a page like this:
Why do some of the profiles get default visibility and some don't?
There is probably an extremely simple profile ...
- 20.3k
1
vote
1
answer
622
views
Create a visible custom field through metadata api, for api 29.0 or greater
I have gone through almost all the previous questions on creating a visible custom field, but none of the posts were helpful to me.
Some provide apex code, some ask to provide ...
- 141
0
votes
2
answers
1k
views
Insufficient Privileges for mass update
I have 6 different User Profiles. One of the Users type wants to be able to do a mass update on their opportunities. so they click on opportunities tab , then select the right view. and click on go ...
- 709
0
votes
1
answer
759
views
soql on events, to display all the events regardless of who is assigned to in a VF page within a community
I am not sure if I am approaching my problem the right way, maybe not, so I will give a very brief explanation of what I am trying to achieve:
Currently I have 2 communities, Community 1 is focused ...
- 1,945
0
votes
2
answers
935
views
apex to override field level security
I have a picklist field "Status" on a custom object. I've set the field level security to read-only for all profiles except for the system administrator profile. So, from the UI, no user can edit ...
- 2,415
3
votes
0
answers
126
views
Why would an app change Field Level Security settings en masse (unexpectedly)?
I installed an app (a managed package) to my org's Salesforce instance this morning, and shortly thereafter noticed that in FLS, visibility had been removed on dozens of important fields, across ...
- 1,224
0
votes
0
answers
48
views
Issues on a LIST button
I have a list button that on clicking take me to page /apex/abc . In that page I have a input field called account : order__c.account__c that is a master detail child to Accounts and a button.
My ...
- 3,152
0
votes
2
answers
67
views
Field level access to the particular user for the particular record
I have a scenario, Account "phone" field is only accessible to the system administrator and for normal user its locked. We have the requirement as if normal user want to change "phone" for the ...
- 11
1
vote
0
answers
490
views
How can I retrieve Field-Level Security Settings for Task object fields using MetaData API
I'm trying to retrieve Field-Level Security Settings for Task object standard fields like Comments or Name using MetaData API.
I was trying a 'retrieve' request like this:
<retrieve>
<...
- 11
2
votes
3
answers
3k
views
Field level security and API access
Could someone please explain how both of the following two statements are correct:
A field hidden by field level security is not visible through the API.
A user has not been granted field-level ...
- 329
2
votes
0
answers
236
views
Should we give the guest user profile the "view encrypted data" permission?
We've developed native VF/Apex code that allows us to send a link to a customer and have them securely view a PDF of their contract (contract is a VF page generated using data from fields in their ...
- 347
2
votes
1
answer
1k
views
Can We able to make Parent fields visible at child pagelayout?
How to show four of the Parent fields at child layout?
- 353
2
votes
2
answers
571
views
Issue with building my SOQL query string
I have a SOQL query,
I want to check the fields in the query for FLS (Field Level Security) before building the query string, and if they aren't readable, dont add them to the string.
This might not ...
- 2,661
2
votes
1
answer
533
views
Manually enforcing FLS in my controller. Is there a way?
So I have a standard user, I want to restrict his access to the My_Field__c field.
In the permission set which is assigned to him, I have disabled the Read rights of the My_Field__c field.
The field ...
- 2,661
2
votes
1
answer
787
views
Testing multiple fields for Field Level Security with .getDescribe()? Is it possible?
I'm working on testing whether or not certain fields are accessible with FLS.
At the moment, using the following method, I can only test one field at a time.
I'm fairly new to APEX, and I'm ...
- 2,661
6
votes
1
answer
715
views
Why did I fail Security Review when not checking FLS or using "without sharing"?
I submitted a package for security review which has a Custom Object which has internal / technical semantics only. So it's not created or even seen by users. When a user performs some action some "...
- 37.3k
1
vote
1
answer
734
views
Problem with FLS and .getDescribe() - APEX
I'm working on a method to test for FLS. In the Field_Information method in my controller,
Schema.DescribeFieldResult drField = a.Name.getDescribe();
Causes the following error when saving:
...
- 2,661
5
votes
2
answers
499
views
Basic unit test to check if I have read access to a field - Apex
I'm currently working on a generic way of implementing FLS on all SOQL calls in my code base.
I want to start by creating a few basic unit tests in Apex to check whether or not I have read access to ...
- 2,661
3
votes
1
answer
561
views
Contact last-modified date changed by read-only user
Have a number of read only users, that appear to all be setup the same way, though one of the users is somehow being logged as the user for the last-modified date on the contact. Again, checked the ...
- 1,618
8
votes
3
answers
9k
views
Set Field Level security for profile using meta-data api
I am using meta-data api to create custom fields in java class. Now I want to set field level security for different profiles. First is it possible to set this with meta-dat api, If yes than how can I ...
- 115
12
votes
2
answers
35k
views
Make a button on a layout be visible only to a specific group of users
If I want a specific field to be visible only to a specific user or group of users on a layout, I set up field-level security for this field. I want to be able to do the same for my custom button ...
- 571
4
votes
1
answer
2k
views
Allow One User to Edit A Field
Our business rules require that the opportunity probability field be linked to the Opportunity's stage. Users can choose the stage, which automatically updates the probability, but the probability ...
- 11.2k
8
votes
3
answers
16k
views
How do 'Modify All Data' and 'View All Data' affect Field-Level Security settings
Does the Modify All Data or View All Data permission allow a user/profile to ignore the FLS settings for an object? The documentation would seem to suggest that this is the case, but I've found ...
- 621
2
votes
1
answer
441
views
Field level security and UI search / API search
I have noticed that if I use field level security to hide a field for a custom profile, a user in the profile can still global search for text in that field and the record will appear in the results, ...
- 6,968
4
votes
1
answer
288
views
New field permission during Push update
The question is about permission for newly added custom field in a managed package.
Consider the situation when we have a managed package (say version 1.0), and we're going to Push upgrade on customer'...
- 2,133
2
votes
1
answer
302
views
Check SObjectType FLS for a specific user
I need to be able to check the FLS (Field-Level Security) settings for a specific user. Since the user in question will not be executing the check I cannot use the DescribeFieldResult class for the ...
- 621
7
votes
2
answers
863
views
Do I need to include Field-Level Security to get on the App Exchange?
I have a list of issues that Salesforce sent me for the security review before my app can be accepted in the AppExchange.
The first section is titled "CRUD and FLS", followed by a lot of examples for ...
- 2,730
3
votes
1
answer
1k
views
Does object level permission effect data visibility on a VF page with Custom controller?
I have a user associated to a profile which does not even have the READ permission on the customObject__c. Now I have to display the customObject__c details on a VF page for this user. I used only a ...
- 4,383
2
votes
1
answer
916
views
Does field level security affect list view criteria?
Question
Is it true the field level security of a field used in the criteria for a list view is ignored? Or is this a bug?
Background
I created a new formula field that's true if a user lookup on ...
- 24.4k
2
votes
1
answer
554
views
Production and sandbox profiles during deployment
I currently maintain two sandboxes. One is a mirror of the current production. The other is a Dev Sandbox which contains all of the new development which will be included in an upcoming release. My ...
- 3,856
2
votes
1
answer
3k
views
Change sets including custom objects and custom fields
I have always been curious how other developers deploy custom objects and fields. If I have a small amount of development work in sandbox, I can just recreate the new custom objects and fields in ...
- 24.1k