Questions tagged [permissions]

Salesforce permissions are all about what a user can do in terms of Field Level Security, object level access, Apex class access, Visualforce page access, and other built in Salesforce access that are handled via a profile or permission set.

200 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7
votes
1answer
61 views

Is Describe Information Accurate for the Site Guest User?

As the title states, can describe information be trusted for the site guest user? Scenario I want to be able to insert/update tasks against accounts via a public Apex webservice. Yes, I'm aware of ...
5
votes
1answer
272 views

What determines the permissions for a profile deployed with change sets?

Question For a new profile created in a sandbox and deployed with a change set it'll carry with it the settings for all other metadata in the change set plus all settings that aren't specifically ...
4
votes
0answers
32 views

SOQL query: “sObject type 'FeedPollChoice' is not supported” for specific user

I have an application that is making calls against the REST /services/data/<api version>/query/ endpoint. My Salesforce org has two users: Alice has the "System Administrator" profile, and Bob ...
4
votes
0answers
793 views

Automated Process User Permissions

We are having some difficulty with permissions. Our admin has also posted on the success board. https://success.salesforce.com/answers?id=9063A000000eB7V, she also found this same posting: https://...
4
votes
0answers
71 views

Enable Apex Classes - Sometimes Only Global, Sometimes Includes Public

I have a managed package that I distribute to clients and I'm running into a curious situation trying to help one install. I have noticed that in the Enable Apex Classes for their System Administrator ...
4
votes
1answer
145 views

CRUD/FLS Checks on CronTrigger

I've recently had an app fail the security review due to lack of CRUD/FLS checks on dynamic/static SOQL. These queries against CronTrigger were some of the things flagged: 24 Integer count = [...
4
votes
1answer
196 views

Can I completely replace Profiles with Permission sets

I have a managed release package which is having one custom profile. Now in next release I want to create a new profile in V2.0 of released package. But what I found is while upgrading package, I can ...
3
votes
0answers
47 views

Standard User with “Modify Metadata” fails to create active Picklist Value

What is failing here perfectly works for a SysAdmin user. I have a StandardUser with a permission set which grants him ModifyMetadata and calling this code creates the Picklist Value but leaves it ...
3
votes
0answers
65 views

Get available record types for any user (not just current one) in apex code

We need to fetch in apex code list of available record types for a user provided by its id. We've already figured out how to do the same for current user (e.g. using DescribeSObjectResult....
3
votes
1answer
148 views

Apex class invalid for community user but not standard

UPDATE: this might be a Spring 19 only issue. Will try to confirm this. If I create an opportunity with a standard Salesforce license, no problem. But if I try the same operation as a community ...
3
votes
0answers
142 views

INSUFFICIENT_ACCESS_OR_READONLY - Cannot Delete QuoteLineItem

17 QuoteLineItem records were loaded into the org via Dataloader with the incorrect product2id listed. When trying to delete the records in the GUI while logged in as a System Administrator, the ...
3
votes
0answers
142 views

How to return all users that have access to a specific record

Is it in any way possible to return a list of users that have access to a specific record together with their permissions? What I want to do is the equivalent of the SOQL query SELECT RecordId, ...
3
votes
1answer
2k views

Editing Converted Leads and Spring 17

I am working with a customer who (despite my reservations) has set up their system to continue to modify Leads after they have been converted. They are doing this using the Spring 16 technique here: ...
3
votes
1answer
672 views

Salesforce Communities Create Contact Portal users cannot own partner accounts

I am getting the error "portal users cannot own partner accounts" when trying to create a new contact through our community site. I have set up a contact list in our Communities site (Napili theme), ...
3
votes
0answers
194 views

Is there any place to set Organization object permission?

We never checked for the accessibility on organization object but by accident we put the access check on Schema.SObjectType.Organization and it fails on some user but it doesn't for other user because ...
3
votes
1answer
394 views

Callout to web service doesn't work depending the profile I'm using

I have a customized button that once you click it, a new window it's open displaying some data from an external app, getting the data through a SOAP web service. If I'm logged as System Administrator ...
3
votes
0answers
462 views

Access to Custom objects for Customer Portal Users

We have customer portal and We have exposed Custom objects that have lookup to Account object and private sharing to Customer portal users. This is done by adding the sharing set such that User's ...
3
votes
0answers
625 views

Can I retrieve or deploy profile settings for managed package components other than objects and fields?

This is a great question and answer that shows how to retrieve profile settings for managed package components, but the answers only seem to apply to objects and fields. Deploying Profiles / ...
3
votes
0answers
1k views

system.security.NoAccessException when trying to save

I have a big confusion here. I have a visual force page with a custom controller. It has a save button that calls the save() action in the custom controller. Custom controller has "without sharing" ...
2
votes
0answers
153 views

Delete __Sharing object

I'm receiving the following error: TR09_MasterServiceAgreement: execution of AfterInsert caused by: System.DmlException: Delete failed. First exception on row 0 with id 02c1800002Lir2PAAR; ...
2
votes
0answers
115 views

Calendar is not working for a custom profile in lightning

I have one custom profile and logged in with its user in a sandbox. I am accessing calendar tab in my app. it is giving me error while loading the object. Unfortunately, there was a problem. ...
2
votes
0answers
437 views

Profile permisison not being deployed with ant tool

General User Permission on profile not updating (Import Personal Contacts) I have all profiles, custom permissions, permission sets, added to the repo as well as leads, accounts, contacts. After ...
2
votes
0answers
32 views

Managed Package - permissions for dynamically generated Visualforce pages

We're working on a yet-unreleased managed package using Salesforce DX. It seems to be standard in DX to manage most permissions in a more portable way via permission sets rather than profiles so we've ...
2
votes
0answers
105 views

Checking FLS in apex code for another user

So basically what I need is to check field-level security in apex class but for some specific user, i.e. not for my current user (bunch of schema describe would do the trick here). So far I've ended ...
2
votes
0answers
196 views

Bug? FieldDefinition is Createable via Tooling API

I found this question very interesting: Programmatically Determine Which Objects Allow Lookup References to Them? In my naiveté, I thought perhaps this question could be answered by using the Tooling ...
2
votes
0answers
33 views

Custom objects visible for all users

I have a managed package with permission set for custom objects, VF pages, etc. When I install this package for a sysadmin user (granted access to only sys admin profile), I see that the custom ...
2
votes
0answers
47 views

What are the permissions required in profile to create an object in salesforce

I would like to know the permission(s) required to create an object in Salesforce, I've created a custom profile and enabled View All Data and Modify All Data permissions but still, I'm not able to ...
2
votes
0answers
70 views

Community Plus User - Contact sharing via SOQL does not match List View

In my Visualforce Page, I just use the following code to get a name list of contacts that the current user can visit. public with sharing class TestClass{ public String getAllContactNames(){ ...
2
votes
0answers
985 views

Let community user download attachments linked to his contact

During enrollment process our community user signs some documents/agreements which are saved as attachments on contact object (community contact representing the current user). And now on community ...
2
votes
1answer
137 views

Workaround to import Campaign Members w/o enabling “Modify All Data”

We have a scenario where 18 users need the ability to add campaign members via an import file. This requires using Data Loader. However, these 18 users also have access to all Contact data across the ...
2
votes
0answers
26 views

Setting permissions from profiles files and permissionsets files

We refreshed our pro sandbox and now we need to reassign the permissions to objects from a backup zip file copy of our sandbox which we got using force.com eclipse (yes, we got the Profiles and ...
2
votes
0answers
100 views

Why Field Accessibility Check is broken in a Managed Package?

my code has a centralised class which is responsible for all DML operations. This class before inserting / updating / deleting a record is checking: 1, if the object is accessible for the current ...
2
votes
1answer
395 views

Permission Sets on Quotes Template

I would like to create a permission set to give an access to all quote templates. I do not want some users within the same profile to see or have access to the quotes template. How to user can only ...
2
votes
0answers
718 views

Give internal users access to the customer portal by default?

By default, the customer portal is accessed via portal user accounts. Salesforce internal users have a separate, non-portal contact for logging into Salesforce via a standard SF splash page. To ...
2
votes
0answers
48 views

Restricting API access to custom webservice

Is it possible to give a 3rd party application access to a custom webservice without giving them access to the standard API? To give a little background on my project. Users will use their ...
2
votes
0answers
22 views

What is the best way to check the user's permissions for a specific record within a visual workflow?

I have a flow that adds products to an Opportunity, but I want to be able to make sure that the user running the flow actually has permission to edit the Opp before continuing with the flow. What is ...
2
votes
1answer
162 views

Restrict access to sibling records (in community)

I have a sharing/permission issue I cannot work out simply. My structure is a top-level object called "Project", which has a Master-Detail (because we need roll-ups) to a child called "Assignment" ...
2
votes
0answers
2k views

INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY, insufficient access rights on cross-reference id: []

I have been battling with this for few days now. Below is my scenario. I do have a trigger on Sampling__c object that updates the owner and assigns a manager for the request created. When updating ...
2
votes
1answer
1k views

Permission set Assign issue for SalesforcePlatform license

I have create a user with the user license as "SalesforcePlatform", here i create some custom permission sets to assign for that user. The Permission set having the System permission access as "Insert ...
2
votes
1answer
177 views

Column not visible in apex, but is visible from REST

I am using the REST describe endpoint to present users with a list of all fields available to them on the Lead object, and then later attempting to use fields they have selected in a custom Apex ...
2
votes
0answers
108 views

Custom Permission - Error in Winter '15 Release Notes?

In WI15 release notes (Force.com customization section, pag.178), it's explained how Custom Permissions work, and particularly it's said that a custom permisssion could be set as required for another ...
2
votes
0answers
38 views

How to efficiently retrieve all workspaces and their users/groups

I have this use case where, for each workspace, I want to retrieve the users and groups that have access to it. Right now, the only path that I see is querying the UserRecordAccess object for each ...
2
votes
0answers
200 views

Confusion with Org-Wide Defaults Permission and Profile

I have two users .. attached is the screenshot The object level permission on "Job Application" object is: The Org-Wide record level access on "Job Application" object is: Now what is happening is ...
2
votes
0answers
54 views

Prevent Chatter Recommendations

We are an org of around 60 Enterprise edition users. We have a new user profile (NewProfile) with a few users assigned. I don't want other users to see these NewProfile users as recommendations in ...
2
votes
0answers
942 views

Users unable to edit multi-user calendar events

The problem: Users are unable to edit multi-user calendar events, despite being given correct permissions (or so I believe...). For example, one user creates an event on their calendar, I want it so ...
1
vote
0answers
14 views

Insufficient access error when trying to change api name of platform event or delete platform event

I am administrator in my scratch org. But when I try to change api name of an existing platform event or try to delete it, I got an error message saying that I don't have sufficient access to it. I ...
1
vote
0answers
42 views

Apex(no sharing specified) , OWD (public read only) and read Object level permission on profile - INSUFFICIENT_ACCESS_OR_READONLY

Custom Object - OWD (public read only) Apex(no sharing specified) and the apex is the entry point Object level permission on profile is read I was trying to update a custom object logging in as a ...
1
vote
0answers
16 views

Validation rule error triggers page to switch from Lightning to Classic

I've created validation rules to dissallow users to change a 'status' field until certain fields are populated. This issue occurs when a user tries to change the 'status' without populating necessary ...
1
vote
0answers
41 views

License required to access User object

I have a requirement to show user list inside the lightning component. Its working fine for all the users except users with "Chatter Only" license. For Chatter-only license, whenever they access that ...
1
vote
0answers
25 views

How to Make Sure Apex Class is Called after Campaign Member Automatically Added/Removed

Been running into this issue for a while and would love some assistance. More than anything, I think this is a question about how to work around permissions. I hope this is the right place to ask this ...