Questions tagged [fls]

FLS - Field level security

Filter by
Sorted by
Tagged with
0
votes
0answers
10 views

Need to create a specific workOrder when Maintaince Plan is created

I need help with some stuff, I need to create suppose 5 workOrder when the Maintain Plan is created via APEX ? When i access it's field's via apex it give me error. I have the Field Level Access (...
0
votes
0answers
29 views

Lightning record form without permission check

I have a requirement to let a set of users edit specific account fields without giving them permission to edit others (including required). I wanted to achieve this using custom permissions and a ...
0
votes
0answers
25 views

Cometd does not receive messages on a Filtered Pushtopic for custom profile

I have a lightning cometd. When I use pushtopic without filter for a custom profile it works. When I add filter, it does not receive the messages. If I login as system admin, the filtered pushtopic ...
0
votes
1answer
132 views

CheckMarx FLS Create/Update Vulnerability in Salesforce Apex Code [duplicate]

I need help in fixing below vulnerabilities found in CheckMarx scan. Scenario: I have written a trigger on FeedItem object. This trigger will archive the FeedItem into custom object ...
-1
votes
1answer
35 views

Apex FLS Methods

I have a question regarding Salesforce FLS. Is there any method available which dynamic check the object field-level security. Like I have Account object and Field name Phone and pass to any ...
0
votes
0answers
40 views

Confused creating FLS for Update

I'm creating an AppExchange App which has an Update operation to be performed. When put through the checkmarx I get the below error. Method saveMappingAssignment at line 65 of classes\...
0
votes
1answer
38 views

Deploy FLS settings for standard object's custom field in managed package

I've added a custom field to Activity object for using it during Task creation/updating from Apex code. By default when I deploy my project through SFDX this field has no FLS settings. In the result I ...
0
votes
1answer
17 views

Profile is being used in community by salesforce?

I am able to see two profile related to site and user. Which profile is used by salesforce to provide Field level access of a object? First one is : (Open Contact having user -> View User -> ...
2
votes
1answer
250 views

Does lightning-input-field automatically respect field level security (FLS) from profile/permission sets?

A strength of Visualforce's apex:inputField is that it automatically respects the view/edit permissions that come from the profile/permission sets for both the object and the fields. I'm assuming ...
3
votes
1answer
32 views

Which user applies to the execution context when executing messaging.sendEmail?

I have a field that is used in an email template for which no FLS is granted in any profiles. The Apex code that sends the email using messaging.sendEmail() is invoked from a trigger so I assume it ...
1
vote
1answer
69 views

Updating a FieldPermission record produces a INVALID_OR_NULL_FOR_RESTRICTED_PICKLIST error

I am attempting to update FLS using FieldPermission records for profiles and permission sets. This is working fine for unmanaged fields, but for managed fields I am getting an error saying that the ...
1
vote
1answer
33 views

How to Stop FLS Defaulting to Read/Write Enabled via Metadata API without Specifying fieldPermissions in Profile

I'd like to define FLS in permission sets alone and not have to maintain FLS per field in profiles. I've been surprised to find that if I do not specify in my profile that the FLS defaults to Read/...
8
votes
2answers
658 views

Get all field level permission from SOQL for an permission set

What I want to do: I am trying to create a tool in Java, which query permission sets from Salesforce Org using REST(As we do in workbench). After getting all the permission sets which field ...
1
vote
0answers
18 views

FIeld hidden by FLS no longer returns records when search terms match?

When FLS hides a field from a user, the search results would still return the record if the search term matched. https://success.salesforce.com/answers?id=9063A000000DcyUQAS This no longer seems to ...
2
votes
1answer
858 views

Disable Lightning Combobox in LWC based on FLS

I know there is a way to check if the object/field is updateable, then only it will allow the user to read or update the field like below apex : if(!Schema.SObjectType.Account.fields.Type....
3
votes
0answers
121 views

How to deploy FLS (Field Level Security) for all Objects & Fields in Scratch Org with application source push?

I'm trying to setup DX with Source code in Git and I'm pulling it from there and pushing it into a Scratch org. My Source code has multiple standard/custom objects with fields. But after Pushing code ...
-1
votes
1answer
85 views

CRUD/FLS checks on Dynamic SOQL - Needed for WHERE clause? [duplicate]

For the AppExchange Security Review, do we need to check FLS on a Dynamic SOQL WHERE clause as well? Ex: If Contact.My_Custom_Field__c is not visible to the logged in user, then the following SOQL ...
11
votes
4answers
761 views

How to best enforce CRUD/FLS and pass Security Review in 2019

Since Salesforce began to require CRUD / FLS checks as part of the Security Review for AppEchange apps in 2015 there has been a lot of discussions why this cannot be done by the platform and how this ...
3
votes
2answers
490 views

How to test CRUD and FLS in unit tests?

BACKGROUND I am working on a managed package and it contains a custom object (X__c) with one custom field (X__c.Fld__c). In the controller I check if a user has Read access to both the object and ...
2
votes
0answers
37 views

Did Salesforce remove FLS visibility for HasOptedOutOfEmail and HasOptedOutOfFax during a release update automatically?

I'm pretty sure my code was querying these some time ago inside a dynamic SOQL query. Today I can't query them anymore because FLS seems to be removed from the Admin profile that I'm using. Easy ...
4
votes
1answer
222 views

Apex Source Scanner flag CRUD/ FLS as security risk for no reason

I've been using FFLIB_SecurityUtils lib to enforce CRUD and FLS in my apex classes. I've no issues when running unit tests, but when submitting my code on Source Scanner for partners, i've several ...
1
vote
1answer
59 views

Restrict FLS for a user when profile has access

For a certain Profile, the access to a group of fields on object is available. How can we restrict FLS for a specific user to those fields having the above mentioned same profile.
0
votes
0answers
159 views

Changing Owner before editing causes an error

Can I have a little help understanding this problem. In this scenario I always recieve an error that looks like a Field Level Security (FLS) problem but I am accessing as a System Administrator. On ...
1
vote
2answers
55 views

FLS info at User Level

I want a sheet for Field Access which User might have got through Profile or permission Set; Also wants to see if for the field user has access to is available on page layout and not restricted ...
1
vote
0answers
32 views

CRUD/FLS Enforcement for configuration tables like FiscalYearSettings

Is Field Level Security enforcement a requirement for querying tables like 'FiscalYearSettings' and 'Period'? or only for tables like Opportunity and Contact. Our app need to display the fiscal year ...
0
votes
2answers
396 views

Does Deleting a Custom Field Remove It From All Page Layouts?

Does Deleting a Custom Field Remove It From All Page Layouts? We have around 90 Case Page-layouts. We were recently told to remove a field from all of them. For best practices, we want to remove the ...
1
vote
1answer
131 views

FLS Create Error

My code on scanner report gives some FLS Create errors code like this public static cg__SURL__c upsertPublicLink(cg__SURL__c sUrl){ if (String.isEmpty(sURL.cg__SUrl_Id__c)) { String ...
0
votes
1answer
516 views

Updating Record Name (auto-generated) using Process flow

I am working on a Developer edition. I have a custom object with an Auto-generated Record Name field. I am trying to update this field with some prefix text to make it more meaningful for the record. ...
0
votes
1answer
470 views

How to hide field from standard page layout - using lightning

I have a custom object with two fields: 1) Start_Date__c - date 2) Start_Month_Year__c - Formula(Text) When the record is view (detail) I just want to show Start_Month_Year__c (formula field) and ...
0
votes
2answers
611 views

Checkmarx Scanner is usless for CRUD and FLS issues checking?

Checkmarx report field Id (User Object) as FLS Create violation whenever the code checks for OwnerId (Account Object) field is createable. Is it false-positive result or can I enforce FLS somehow to ...
3
votes
1answer
143 views

How to enforce CRUD and FLS in bulk trigger?

How to enforce CRUD and FLS in following situation (bulk trigger). Better idea is simply throw an exception or addError(errMsg) ? trigger CaseCommentTrigger on CaseComment (after insert) { List<...
0
votes
1answer
21 views

FLS on Salesprice field

How to Remove the Access to Sales Price field on Opportuity Products. When i am trying to edit the FLS of Sales Price it is visible to all profiles and not able to change the FLS. I want to remove ...
1
vote
2answers
58 views

How do I determine by Apex code if Custom Field allows setting Field Level Security and if can be edited?

To assign correct FLS permissions in bulk for a given profile I need to know which fields are readonly and which fields support Field Level Security. I see that there is field IsFlsEnabled in ...
0
votes
1answer
214 views

CRUD FLS issue to edit task access for site guest user

I am applying CRUD FLS on task object fields and also I have provided read and edit access to task for site user profile. Even checked with sharing settings as 'Controlled by parent'. But still when ...
2
votes
0answers
70 views

Do subsequent Unlocked Package version installs deploy FLS?

I've created an Unlocked Package using Salesforce CLI and installed the first version in an org. I've checked the Field Level Security for each Profile and they were all correct. But when I changed ...
1
vote
1answer
214 views

FLS and CRUD check for User object

I have a code which is inserting user object. It is created when the end user creates his account from force.com site. Since we cannot control FLS for user fields at profile level do we have to check ...
1
vote
1answer
244 views

check FLS and CRUD for more than one field

I have a code which inserts custom Note__c object by using 5 fields. I want to check FLS and CRUD permission field level wise as they are reported in the checkmarx report. I know we can write in if ...
0
votes
1answer
141 views

Not able to update RecurrenceTimeZoneSidKey field on task object

What are the work around the task object in Salesforce, i am trying to update task which is having information in the form of JavaScript object which is mentioned below and when i am trying to update ...
5
votes
1answer
192 views

CRUD & FLS on Managed Package Objects

We're working on a managed package that includes two data SObjects which track and log the work the users do in our package. We are including an Admin permission set and a User permission set to ...
0
votes
2answers
47 views

Field-level setting in the Campaign object

In my project, I create the Campaign object through Site. On public site setting, I configured (FLS)field level setting for all Custom fields in the Campaign Object. Access the site above to ...
7
votes
1answer
68 views

Is Describe Information Accurate for the Site Guest User?

As the title states, can describe information be trusted for the site guest user? Scenario I want to be able to insert/update tasks against accounts via a public Apex webservice. Yes, I'm aware of the ...
8
votes
3answers
238 views

Any way to check a field's updateablity ignoring profiles?

The DescribeFieldResult.isUpdateable method incorporates the "Edit Access" setting of the Field level Security for a field i.e. it considers the field settings in the current profile. Is there a way ...
9
votes
1answer
541 views

What is the difference between creatable vs. updatable on Schema.DescribeFieldResult

When writing CRUD and FLS checks in apex I have noticed that I can check for the following: Schema.DescribeFieldResult fieldDescribe = field.getDescribe(); fieldDescribe.accessible; fieldDescribe....
1
vote
1answer
775 views

Permission Set does not override Field Level Security?

According to this documentation, Permission Sets are defining the Field Level Security. But I'm experiencing odd behavior. I'm not having access to a field, that I should be able to edit, according to ...
4
votes
1answer
247 views

Hiding Standard fields from the Record creation window - Napili Template

Seems straight forward: Field Level Security to hide the fields, but this seems like, we cannot make disable the Read permission(as it always defaults to checked): Created By, Last Modified By, Record'...
0
votes
1answer
1k views

How to retrieve FLS settings for a custom field

I have a custom field custom_field__c in Opportunity object and using APEX or metadata API (workbench) is there a way to find what are the set field level security profile is set for that given custom ...
2
votes
1answer
72 views

AppExchange ISV Security Review CRUD/FLS Puzzler

Who knows the answer to this puzzler? Q: If a Visualforce Page is using a standard controller with a custom controller extension and the controller extension is declared "with sharing", do we need ...
2
votes
1answer
675 views

CRUD/FLS Enforcement: how to add isAccessible() to the test class for code coverage

I received the result from security review from Salesforce team and it failed. One of the vulnerability shown in the report was CRUD/FLS Enforcement. The report suggest I use the isAccessible() check ...
2
votes
0answers
64 views

CRUD-FLS Implementation for Event Object

We are creating a managed package and have submitted for Security review process. We had implemented CRUD-FLS check on all the objects we had used within our application except EVENT. But we had ...
1
vote
0answers
125 views

FLS/CRUD Enforcement In Helper Classes

We have several controller classes that call out to helper classes to grab data or save data. This has resulted in a few questions... Is it sufficient to simply check all permissions in the ...