Questions tagged [fls]

FLS - Field level security

Filter by
Sorted by
Tagged with
3
votes
1answer
347 views

CRUD FLS enforcements and best practices

I have written a basic controller class which does insert/delete/update. I wanted to validate whether I'm thinking about CRUD/FLS enforcements the right way. Also wanted to know what are the best ...
2
votes
1answer
769 views

Sample test for testing FLS/CRUD

I'm trying to understand FLS/CRUD permissions using a simple test. I have created a user and assigned a no-update,no-delete,no-create permission set on that. In my test I'm trying to run as this new ...
5
votes
2answers
2k views

How to resolve FLS Create and FLS Update issue as per security scanner

Running the Security Scanner showed the Following Issues In order to avoid it I tried adding the following line if(Schema.sObjectType.SAP_Change_Event_Config__c.isCreateable())- For object ...
44
votes
2answers
6k views

Lightning Experience: How to prevent the display of obsolete data?

In many cases I've seen that LE is not displaying recent changes made in Setup immediately like in Salesforce Classic, but somehow cached or delayed. Yesterday I found an easy and perfectly ...
1
vote
1answer
405 views

FLS Create for upsert

How manage FLS Create issues in Checkmarx for upsert statements ? I use isCreateable() for insert and isUpdateable() for update. But for upsert, I don't know what function I have to use (one or both)...
1
vote
1answer
769 views

Enforcing CRUD / FLS / Sharing in Apex

I am having trouble putting the different aspects of enforcing CRUD/FLS/Sharing Rules into perspective. Reading through the manuals and doing extensive tests on my own, I came to the following ...
3
votes
1answer
151 views

Why is Field Level Security at the object-level presented as “Visible / Read-only” instead of “read / edit”?

If you access FLS settings for a given profile, it lists all the "edit" and "read" permissions for all fields in any object. If accessing the FLS settings from the object by clicking the "Field Level ...
9
votes
1answer
749 views

Security Review - CRUD/FLS Checks for every SOQL Query

I know this sounds like a standard question, so please bear with me. Recently our Security Reviews fail due to CRUD/FLS violations. The highlighted codelines include almost every SOQL Query in the ...
0
votes
1answer
869 views

Custom field as made Read only via Field level security and same Custom field as Required in Page layout

A custom field is made Read only from the Field level security and Required from Page layout. I can see the Field as Read Only for the User. Why it is happening? Is it because the Field level security ...
1
vote
2answers
1k views

The post install script failed

We've the following post install script in place. We have recently updated it to check for FLS CRUD validation as Checkmarx scan suggested. Does custom settings need to have this FLS CRUD validation?...
8
votes
1answer
715 views

Most optimal way to Enforce CRUD/FLS in Apex

This article shows a common way to check access in Apex with a syntax like: if (!Schema.sObjectType.Contact.fields.Name.isAccessible()){ return ''; } However, it is very time/space-consuming to ...
2
votes
2answers
829 views

How to restrict read only field on visualforce page to edit using Inline edit functionality

I have provided standard inline edit functionality on the visualforce page. I want to restrict the user to edit the field if he/she has not edit access on it. I have set FLS as read only for these ...
1
vote
1answer
113 views

Deploying Fields (new or pre-existing) - Security

I haven't been doing Deployments for over a year now in Salesforce (my role, and company, have significantly changed). However, where I now work, I have developers telling me they CAN NOT DEPLOY ...
1
vote
1answer
103 views

Custom Button visibility on Page layout dependent on FLS of some field

Is it possible to control Custom Button visibility on Standard Page layout depending on FLS of some field? Or any other way? Please advise.
1
vote
1answer
828 views

Migrating Fields added to report types using ANT

Question 1: I have added few fields in custom report types in UAT. Can i move these changes using ANT tool to PRODUCTION? Usually after deployment, we manually add fields in Report Types in ...
2
votes
0answers
114 views

Why Field Accessibility Check is broken in a Managed Package?

my code has a centralised class which is responsible for all DML operations. This class before inserting / updating / deleting a record is checking: 1, if the object is accessible for the current ...
7
votes
3answers
623 views

Platform Encryption vs. FLS

What would I get from Platform Encryption that I cannot get from Field Level Security? We are investigating whether or not to invest in Salesforce Shield, so I want to better understand the ...
5
votes
2answers
680 views

Better way for Bulk Assignment of Field Level Security

In Salesforce we have a custom object which has 500 fields. We have around 50 different profiles in our org. Out of this 50 profiles, 30 profiles need access to these fields. Right now, to set field ...
1
vote
3answers
3k views

How do I check CRUD and FLS in apex?

Please help me solving this Issue. I'm new to the salesforce, I worte an Controller which do get list of objects values from contact, Cases and also inserts New cases and Case comments to, During the ...
0
votes
1answer
107 views

Run test code as a community user, but pass CRUD/FLS checks

So, the title might be a bit confusing, but I tried to keep it short. Here's the problem I'm facing: So we've built out some community based pages for one of our products. Because these pages utilize ...
0
votes
1answer
1k views

Update FLS for multiple fields across profiles using eclispse

we are in the process of merging two orgs and ran into a situation where we need to migrate few custom objects from org A to org B. The problem is, we are going to continue with the sharing model that ...
1
vote
0answers
513 views

deploying Field level security

what is different from force.com 28 to 31? i was able to move the field level security using force.com 28 without adding profiles to the package. but with the newer versions of Force.com >= 31 it is ...
0
votes
1answer
41 views

Custom Field is inactive/inaccessible but with proper FLS

I have a custom picklist field(Program__c) in Account object which is Visible to System Admin profile. However when a System Admin opens an Account record, its appears inactive/inaccessible. Here is ...
0
votes
1answer
67 views

Custom fields - FLS

When you create a new custom field on a standard object or a custom object, by default there is some FLS. (I mean for some profiles the Visible checkbox is checked and for some it is not.) How is that ...
0
votes
1answer
57 views

FLS Code Coverage issue

Need code coverage for my IF block if (!Schema.sObjectType.Account.fields.Name.isCreateable()) { ApexPages.addMessage(new ApexPages.Message(ApexPages.Severity.FATAL, ...
1
vote
1answer
37 views

Which permission is needed for a profile to be able to edit/set FLS

I am hitting a brick wall. Just can't find which permission needs to be enabled on a profile to allow assigned users to set up and/or edit FLS. The issue is that due to policy restrictions I can't ...
3
votes
1answer
113 views

What determines the default FLS settings when creating a new field

In step 3 of the create new field wizard, you are presented with a page like this: Why do some of the profiles get default visibility and some don't? There is probably an extremely simple profile ...
1
vote
1answer
386 views

FLS Security with ant deployments

Is it correct that ANT defaults FLS to visible? Everywhere else I look it seems to suggest that FLS is only set on profiles that you also have in the package, but that's not what I'm seeing. FLS for ...
2
votes
1answer
63 views

If object is private but its lookup allows Read, what will happen?

What will be the access level for the lookup field in these 2 scenarios: MyObject is private, object-level permissions allow Read, and lookup to MyObject allows Read Same as 1 but object-level ...
1
vote
2answers
611 views

Is it possible to change Field Level Security with Workflows

How can I show a hidden field to a user after triggering a workflow which will evaluate on certain condition and will decide either this field need to be visible or not?
3
votes
1answer
149 views

FLS behaviour different between API and GUI/Apex

Assume Contact.DoNotCall and Opportunity.ContractId are FLS invisible for the standard profile "System Administrator". Both fields are visible in the setup and are reported by describe calls in Apex ...
5
votes
2answers
931 views

Do we allow CRUD & FLS in each component of Apex?

Can I write CRUD & FLS Enforecement codes in following : If not in any of these - then Why ? Apex Class - YES Apex Trigger - ? Apex BatchClasses - ? Utility Classes - ?
1
vote
0answers
85 views

Do I need any CRUD & FLS Checking for code below ? Will it pass in Appexchange Review?

Note : I have done CURD & FLS for Account & Contact which I have inserted already i.e. objAccount1 and objContact1 Code : //create an opp for each lead Database....
3
votes
2answers
805 views

CRUD and FLS enforcement

I have an Account list and I want to update it. I want to testing object and field level security enforcement but I'm wondering what I have to test : 1 - if Account object is updatable ? (if it's ...

1 2