Questions tagged [fls]

FLS - Field level security

Filter by
Sorted by
Tagged with
2
votes
1answer
39 views

FLS in SOQL - VisualForce vs LWC

I have a VF page and an LWC, both the UI are displaying a datatable of records Project__c. User A (Standard user) doesn't have access to Report__c and Geographic__c field on Project__c. The VF page ...
0
votes
2answers
30 views

CRUD/FLS checks on fields of a lookup

We have a Salesforce public site where we expose name fields of Account and Contact object. These fields are queried through a lookup of Account and Contact on a custom object. Like this: [Select Id, ...
0
votes
1answer
36 views

Change data capture and FLS

As per documentation, it is mentioned : Change Data Capture(CDC) respects your org’s field-level security settings. Delivered events contain only the fields that a subscribed user is allowed to view. ...
11
votes
0answers
109 views

Is there a reliable way to have WITH SECURITY_ENFORCED applied to all queries?

I've just gone through a biggish code base making sure that WITH SECURITY_ENFORCED is set on every query. Most were, but for some recent additions, it hadn't been included. For managed packages that ...
3
votes
1answer
147 views

2GP Create Package Version Fails when running tests

I've recently added some Field Level Security checks into the Apex code of a 2GP managed package. But when I run: sfdx force:package:version:create ... A lot of the tests fail, saying the fields are ...
1
vote
1answer
47 views

Force.com Source Scanner Results: FLS Update and Create

I've run the Force.com Source Scanner against my Managed Package and here are the summary results: There are two areas FLS Update and FLS Create where I got 28, and 37 risks respectively... I am ...
4
votes
1answer
151 views

Why is stripInaccessible removing an M-D field?

I am building and LWC which uses lightning-record-edit-form to create an object, then calls an Apex controller method to create a list of M-D children of the newly created object. In my current test, ...
0
votes
1answer
41 views

Why there are no entries in FieldPermissions table if a field is marked as Required in Setup?

I use query like below to find what Profiles and Permission Sets give what kind of permissions to a specific field: SELECT Parent.ProfileId, Parent.IsOwnedByProfile, ParentId, Parent.Label, Parent....
0
votes
0answers
63 views

Managed Package Platform Event and DML by unlicensed user

I am working on a managed package which will be licensed per user. The package will include two features: Feature A: Global Apex Class that publishes platform events (also packaged). Trigger on this ...
-2
votes
1answer
48 views

How to fix FLS Create and FLS Update issue as per security scanner

String attachmentLinks = ''; if(!commAttList.isEmpty()){ Database.insert(commAttList,false); } return attachmentLinks;
0
votes
1answer
32 views

How can I get all custom fields that are Hidden from all profiles?

I got responsibility for another SF instance. The objects all have 100's of fields, of which many are hidden from all users (historically, they would not delete the field, but hide it from all users - ...
0
votes
0answers
19 views

Isupdatable is false in higher env, even though its true in development sandbox

While updating some fields of order product object using apex in my test sandbox I am getting isupdatable as false in the alex class. Even though isupdatable for the same field is coming as true in ...
3
votes
1answer
116 views

FLS check in 2GP

I've created a new 2GP package. Since it is going to be released to AppExchange, I've implemented a generic CRUD and FLS check for every place I contact with the Database in my Apex code. e.g. ...
0
votes
0answers
11 views

Need to create a specific workOrder when Maintaince Plan is created

I need help with some stuff, I need to create suppose 5 workOrder when the Maintain Plan is created via APEX ? When i access it's field's via apex it give me error. I have the Field Level Access (...
0
votes
0answers
37 views

Cometd does not receive messages on a Filtered Pushtopic for custom profile

I have a lightning cometd. When I use pushtopic without filter for a custom profile it works. When I add filter, it does not receive the messages. If I login as system admin, the filtered pushtopic ...
0
votes
1answer
1k views

CheckMarx FLS Create/Update Vulnerability in Salesforce Apex Code [duplicate]

I need help in fixing below vulnerabilities found in CheckMarx scan. Scenario: I have written a trigger on FeedItem object. This trigger will archive the FeedItem into custom object ...
-1
votes
1answer
241 views

Apex FLS Methods

I have a question regarding Salesforce FLS. Is there any method available which dynamic check the object field-level security. Like I have Account object and Field name Phone and pass to any ...
0
votes
0answers
112 views

Confused creating FLS for Update

I'm creating an AppExchange App which has an Update operation to be performed. When put through the checkmarx I get the below error. Method saveMappingAssignment at line 65 of classes\...
0
votes
1answer
324 views

Deploy FLS settings for standard object's custom field in managed package

I've added a custom field to Activity object for using it during Task creation/updating from Apex code. By default when I deploy my project through SFDX this field has no FLS settings. In the result I ...
0
votes
1answer
100 views

Profile is being used in community by salesforce?

I am able to see two profile related to site and user. Which profile is used by salesforce to provide Field level access of a object? First one is : (Open Contact having user -> View User -> ...
2
votes
1answer
834 views

Does lightning-input-field automatically respect field level security (FLS) from profile/permission sets?

A strength of Visualforce's apex:inputField is that it automatically respects the view/edit permissions that come from the profile/permission sets for both the object and the fields. I'm assuming ...
3
votes
1answer
37 views

Which user applies to the execution context when executing messaging.sendEmail?

I have a field that is used in an email template for which no FLS is granted in any profiles. The Apex code that sends the email using messaging.sendEmail() is invoked from a trigger so I assume it ...
1
vote
2answers
194 views

Updating a FieldPermission record produces a INVALID_OR_NULL_FOR_RESTRICTED_PICKLIST error

I am attempting to update FLS using FieldPermission records for profiles and permission sets. This is working fine for unmanaged fields, but for managed fields I am getting an error saying that the ...
1
vote
1answer
71 views

How to Stop FLS Defaulting to Read/Write Enabled via Metadata API without Specifying fieldPermissions in Profile

I'd like to define FLS in permission sets alone and not have to maintain FLS per field in profiles. I've been surprised to find that if I do not specify in my profile that the FLS defaults to Read/...
9
votes
2answers
3k views

Get all field level permission from SOQL for an permission set

What I want to do: I am trying to create a tool in Java, which query permission sets from Salesforce Org using REST(As we do in workbench). After getting all the permission sets which field ...
1
vote
0answers
25 views

FIeld hidden by FLS no longer returns records when search terms match?

When FLS hides a field from a user, the search results would still return the record if the search term matched. https://success.salesforce.com/answers?id=9063A000000DcyUQAS This no longer seems to ...
3
votes
1answer
3k views

Disable Lightning Combobox in LWC based on FLS

I know there is a way to check if the object/field is updateable, then only it will allow the user to read or update the field like below apex : if(!Schema.SObjectType.Account.fields.Type....
3
votes
0answers
325 views

How to deploy FLS (Field Level Security) for all Objects & Fields in Scratch Org with application source push?

I'm trying to setup DX with Source code in Git and I'm pulling it from there and pushing it into a Scratch org. My Source code has multiple standard/custom objects with fields. But after Pushing code ...
-1
votes
1answer
168 views

CRUD/FLS checks on Dynamic SOQL - Needed for WHERE clause? [duplicate]

For the AppExchange Security Review, do we need to check FLS on a Dynamic SOQL WHERE clause as well? Ex: If Contact.My_Custom_Field__c is not visible to the logged in user, then the following SOQL ...
11
votes
4answers
2k views

How to best enforce CRUD/FLS and pass Security Review

Since Salesforce began to require CRUD / FLS checks as part of the Security Review for AppEchange apps in 2015 there has been a lot of discussions why this cannot be done by the platform and how this ...
3
votes
2answers
852 views

How to test CRUD and FLS in unit tests?

BACKGROUND I am working on a managed package and it contains a custom object (X__c) with one custom field (X__c.Fld__c). In the controller I check if a user has Read access to both the object and ...
2
votes
0answers
42 views

Did Salesforce remove FLS visibility for HasOptedOutOfEmail and HasOptedOutOfFax during a release update automatically?

I'm pretty sure my code was querying these some time ago inside a dynamic SOQL query. Today I can't query them anymore because FLS seems to be removed from the Admin profile that I'm using. Easy ...
4
votes
1answer
330 views

Apex Source Scanner flag CRUD/ FLS as security risk for no reason

I've been using FFLIB_SecurityUtils lib to enforce CRUD and FLS in my apex classes. I've no issues when running unit tests, but when submitting my code on Source Scanner for partners, i've several ...
1
vote
1answer
113 views

Restrict FLS for a user when profile has access

For a certain Profile, the access to a group of fields on object is available. How can we restrict FLS for a specific user to those fields having the above mentioned same profile.
0
votes
0answers
245 views

Changing Owner before editing causes an error

Can I have a little help understanding this problem. In this scenario I always recieve an error that looks like a Field Level Security (FLS) problem but I am accessing as a System Administrator. On ...
1
vote
2answers
65 views

FLS info at User Level

I want a sheet for Field Access which User might have got through Profile or permission Set; Also wants to see if for the field user has access to is available on page layout and not restricted ...
1
vote
0answers
33 views

CRUD/FLS Enforcement for configuration tables like FiscalYearSettings

Is Field Level Security enforcement a requirement for querying tables like 'FiscalYearSettings' and 'Period'? or only for tables like Opportunity and Contact. Our app need to display the fiscal year ...
0
votes
2answers
2k views

Does Deleting a Custom Field Remove It From All Page Layouts?

Does Deleting a Custom Field Remove It From All Page Layouts? We have around 90 Case Page-layouts. We were recently told to remove a field from all of them. For best practices, we want to remove the ...
1
vote
1answer
238 views

FLS Create Error

My code on scanner report gives some FLS Create errors code like this public static cg__SURL__c upsertPublicLink(cg__SURL__c sUrl){ if (String.isEmpty(sURL.cg__SUrl_Id__c)) { String ...
0
votes
1answer
994 views

Updating Record Name (auto-generated) using Process flow

I am working on a Developer edition. I have a custom object with an Auto-generated Record Name field. I am trying to update this field with some prefix text to make it more meaningful for the record. ...
0
votes
2answers
950 views

Checkmarx Scanner is usless for CRUD and FLS issues checking?

Checkmarx report field Id (User Object) as FLS Create violation whenever the code checks for OwnerId (Account Object) field is createable. Is it false-positive result or can I enforce FLS somehow to ...
3
votes
1answer
153 views

How to enforce CRUD and FLS in bulk trigger?

How to enforce CRUD and FLS in following situation (bulk trigger). Better idea is simply throw an exception or addError(errMsg) ? trigger CaseCommentTrigger on CaseComment (after insert) { List<...
0
votes
1answer
21 views

FLS on Salesprice field

How to Remove the Access to Sales Price field on Opportuity Products. When i am trying to edit the FLS of Sales Price it is visible to all profiles and not able to change the FLS. I want to remove ...
1
vote
2answers
90 views

How do I determine by Apex code if Custom Field allows setting Field Level Security and if can be edited?

To assign correct FLS permissions in bulk for a given profile I need to know which fields are readonly and which fields support Field Level Security. I see that there is field IsFlsEnabled in ...
0
votes
1answer
399 views

CRUD FLS issue to edit task access for site guest user

I am applying CRUD FLS on task object fields and also I have provided read and edit access to task for site user profile. Even checked with sharing settings as 'Controlled by parent'. But still when ...
2
votes
0answers
78 views

Do subsequent Unlocked Package version installs deploy FLS?

I've created an Unlocked Package using Salesforce CLI and installed the first version in an org. I've checked the Field Level Security for each Profile and they were all correct. But when I changed ...
1
vote
1answer
353 views

FLS and CRUD check for User object

I have a code which is inserting user object. It is created when the end user creates his account from force.com site. Since we cannot control FLS for user fields at profile level do we have to check ...
1
vote
1answer
335 views

check FLS and CRUD for more than one field

I have a code which inserts custom Note__c object by using 5 fields. I want to check FLS and CRUD permission field level wise as they are reported in the checkmarx report. I know we can write in if ...
0
votes
1answer
240 views

Not able to update RecurrenceTimeZoneSidKey field on task object

What are the work around the task object in Salesforce, i am trying to update task which is having information in the form of JavaScript object which is mentioned below and when i am trying to update ...
5
votes
1answer
232 views

CRUD & FLS on Managed Package Objects

We're working on a managed package that includes two data SObjects which track and log the work the users do in our package. We are including an Admin permission set and a User permission set to ...