Questions tagged [permissions]

Salesforce permissions are all about what a user can do in terms of Field Level Security, object level access, Apex class access, Visualforce page access, and other built in Salesforce access that are handled via a profile or permission set.

Filter by
Sorted by
Tagged with
0
votes
1answer
414 views

Unable to Add quote line items : facing error insufficient priviledges

I am getting error "insufficient priviledeges while adding quote line item. Checked with permission setting for profile but still same. i have access to quote object. Got to the one point, when we ...
3
votes
1answer
2k views

Editing Converted Leads and Spring 17

I am working with a customer who (despite my reservations) has set up their system to continue to modify Leads after they have been converted. They are doing this using the Spring 16 technique here: ...
0
votes
0answers
18 views

Community Users have access to internal records?

For some unknown reasons, my org's Community Users have access to records that the internal org members generated. I have checked the following setting: Opportunity Sharing Rule: none that applies to ...
1
vote
0answers
31 views

Why are readable/editable fields missing from Profile.xml Metadata? Workaround?

I'm trying to build a "no permissions" baseline profile in a sandbox I just spun up from my production org before playing with a new integration (so I can assign permissions in a "least privilege" way)...
0
votes
1answer
440 views

Custom__obj__c: bad field names on insert/update call

We have a manged package which is installed by multiple user we are running a piece of code using salesforce rest API which update our custom objects at user account some user are updated perfectly ...
2
votes
1answer
26 views

Can I turn off read access to field history for some users?

All users should be able to see Cases, generally. Some of my users should see CaseHistory on the Case layout, and some (same profile) shouldn't. Is there any way to remove View permissions on ...
1
vote
1answer
69 views

The record couldn't be saved because it triggered an email alert that failed

Staff user is a member of Queue 1 attempting to transfer a record to another team which works out of Queue 2. When updating the owner to Queue 2 and saving the record the following error displays. ...
3
votes
1answer
701 views

Salesforce Communities Create Contact Portal users cannot own partner accounts

I am getting the error "portal users cannot own partner accounts" when trying to create a new contact through our community site. I have set up a contact list in our Communities site (Napili theme), ...
1
vote
1answer
26 views

Limit Access to records unless they are shared

This might be somewhat of a stupid question, at least it feels like it should be a fairly easy solution but I've been banging my head against it for a couple of days now with no luck. I'm trying to ...
0
votes
1answer
33 views

My boss deactivated the “Running User” who created the President's Dashboard which then disappeared

As stated in the title, in Classic, my boss deactivated a "Running User" who created the President's Dashboard which then disappeared. The deactivation was performed because that person is no longer ...
0
votes
1answer
31 views

Need that Partner User see contacts that match certain field with their own contact

Partner user should only see contact records that are related to them based on a field on the contact record, let's say Account for example. What I have tried: Sharing Settings: Contact | Public ...
6
votes
3answers
1k views

For the Platform Event “Automated Process” user, why do both Visualforce controller access and email sending fail?

We are executing some asynchronous code that uses getContentAsPdf on a Visualforce page as the result of handling custom platform event and we get this error in the Apex Jobs listing: First error: [...
0
votes
0answers
22 views

Marketing Cloud API for Admin Users [duplicate]

I am creating an external tool to help with auditing user access across multiple applications. One of those on the list is Marketing Cloud to be able to see which users have accounts and their status. ...
1
vote
1answer
50 views

How to remove fieldPermissions from Profile via metadata API

We manage to create new fieldPermissions by calling updateMetadata() and passing to it a Profile object with the new fieldPermissions. However, we haven't figured out a way to remove specific ...
1
vote
0answers
19 views

Insufficient access error when trying to change api name of platform event or delete platform event

I am administrator in my scratch org. But when I try to change api name of an existing platform event or try to delete it, I got an error message saying that I don't have sufficient access to it. I ...
0
votes
1answer
23 views

Can change the ownership(to internal user) of custom object record by Site Guest User

We have lightning community, in which we have drag and drop component. After onclick of button, we are updating custom object 'contact survey' record owner id. In @AuraEnabled method we are updating ...
1
vote
1answer
26 views

CRUD enforcement does not allow access despite user privilegies

I've a custom object accessible for a custom profile cloned from Salesforce/ Standard user profile. The custom object was created using a System administrator user profile. I've granted access to this ...
4
votes
0answers
36 views

SOQL query: “sObject type 'FeedPollChoice' is not supported” for specific user

I have an application that is making calls against the REST /services/data/<api version>/query/ endpoint. My Salesforce org has two users: Alice has the "System Administrator" profile, and Bob ...
1
vote
0answers
51 views

Apex(no sharing specified) , OWD (public read only) and read Object level permission on profile - INSUFFICIENT_ACCESS_OR_READONLY

Custom Object - OWD (public read only) Apex(no sharing specified) and the apex is the entry point Object level permission on profile is read I was trying to update a custom object logging in as a ...
2
votes
0answers
87 views

Files Upload is not Working for Community Profiles [duplicate]

I have created one file upload component page and using that page in the community portal but when I'm uploading a file a file its not working. If I'm doing the same with a console app, then it is ...
1
vote
0answers
17 views

Validation rule error triggers page to switch from Lightning to Classic

I've created validation rules to dissallow users to change a 'status' field until certain fields are populated. This issue occurs when a user tries to change the 'status' without populating necessary ...
3
votes
0answers
60 views

Standard User with “Modify Metadata” fails to create active Picklist Value

What is failing here perfectly works for a SysAdmin user. I have a StandardUser with a permission set which grants him ModifyMetadata and calling this code creates the Picklist Value but leaves it ...
0
votes
1answer
72 views

Can't disable “Edit Read Only Fields” permission for system administrator

If I go to: service setup - profiles - system administrator - system permissions Here there's a long list of permissions. I'd like to disable the "Edit Read Only Fields" permission but there's not ...
11
votes
6answers
1k views

App disappears from Permission Set included with package

We're working on our first Salesforce package, and recently switched from creating Beta packages to a Managed Package. For some reason, the permission set that we're pushing loses the entry in ...
2
votes
2answers
2k views

How to update all profiles with the same Custom Object Permissions?

The case: I created a custom object. After that, I need to give permissions to all profiles. I have a lot of profiles. And editing each one is time-consuming. Is there a way to update all profiles at ...
0
votes
1answer
35 views

Create a record OutOfOffice

When I try to create a OutOfOffice record with which the other user is not my own user in apex, Salesforce throw the DML error ("INVALID_ACCESS_LEVEL, Only Self User can update the Out Of Office ...
1
vote
1answer
44 views

Retrieved profile from scratch org contains a permission which is unknown to a sandbox, why?

I've been working with SalesforceDX for a while now, and I've always removed profiles from deployments because of similar issues. Often you will create a simple scratch org, write your code, and then ...
16
votes
2answers
5k views

are Triggers (and their delegated classes) or Batch affected by sharing?

I understand with sharing classes run in User Mode, meaning they respect permissions, field-level security and sharing rules of the current user. I understand without sharing classes run in System ...
0
votes
0answers
23 views

How to make some field read only on an object accordingly to the profile

I have to do something like this : For each profile, except system admins, on the inactive accounts (statut__c = 'inactive') we should not be able to edit every fields (so I need to make them read ...
0
votes
1answer
30 views

Apex Check is Object is enabled

We have a managed package and wants to check if the subscriber has enabled Network object in their Org. I try with this Schema.sObjectType.Network.isAccessible() But getting an error if the network ...
0
votes
1answer
19 views

Give Manage User Permission to a User without View Setup and Configuration

I have a visualforce page to manage users (deactive, create, edit and reset passwords), but when I add the permissin manage users to the profile, the user with this profile can see the Setup option, ...
1
vote
0answers
41 views

License required to access User object

I have a requirement to show user list inside the lightning component. Its working fine for all the users except users with "Chatter Only" license. For Chatter-only license, whenever they access that ...
6
votes
0answers
275 views

What determines the permissions for a profile deployed with change sets?

Question For a new profile created in a sandbox and deployed with a change set it'll carry with it the settings for all other metadata in the change set plus all settings that aren't specifically ...
0
votes
0answers
17 views

How to programmatically set all fields to read/edit for System Admin

Is there a way to programmatically set all the field permissions on the Admin profile? The problem I've encountered is that while you can set FLS with Apex or mdAPI, both only allow access to those ...
0
votes
1answer
29 views

How to move newly created salesforce profile in sandbox to production with correct permissions?

I have a pretty standard scenario that I have not been able to find a clear answer or great documentation on. The scenario is, in Sandbox A, you clone Custom Profile 1 as Custom Profile 2. You ...
0
votes
1answer
31 views

Need to Fetch If assigned PermissionSet to user have specific permission

Requirement-I need to sent true or false flag based on permissions assigned to user Permission sets. Suppose one user is having 5 permissions assigned to him/her ,I need to check(...
1
vote
3answers
1k views

Can we not delete published Knowledge Articles?

Can we not delete the Publish Knowledge Article? I have given Read, Create, Edit, Delete, and View All permissions to the profile. But it looks like only Draft articles can be deleted. I cant see ...
2
votes
1answer
41 views

What do Profiles do uniquely?

After becoming frustrated with the half-dozen Profiles that all do the same thing (except for subtle differences here and there), I have started on cleaning up my org's permissions scheme. My basic ...
0
votes
1answer
25 views

Impacts on Page Layouts, Record Types, Objects and Fields on Profiles Clean Up

Since the Salesforce org becomes old, there is a need for Clean up. On this process, looking to clean up the profiles in the org. I have already created an Administrative User report to check the ...
1
vote
3answers
205 views

How to allow OpportunityLineItem delete but not Opportunity delete

How can I stop users from deleting Opportunity's but allow them to delete OpportunityLineItems? Because OpportunityLineItem is a child record of Opportunity it is not possible to control it's object ...
1
vote
1answer
40 views

Dynamically retrieve information, if a given SObject field is system read-only

I have apex code that dynamically creates SObject records based on configurations (metadata type records). The code needs to evaluate on-the-fly, if the Sobject field that should be "put" (...
0
votes
0answers
85 views

how to get API names of permission in profile/permission set

I have some permission names which i want API name of those permissions. couple of permissions which i am not able to get APIname and not also able to judge apiNames of those profiles from fetching ...
45
votes
3answers
7k views

Salesforce bug enabled “Modify All”

Apparently, Salesforce has released a patch that implicated "Modify all" to be enabled for every single profile in some orgs. This includes standard profiles and custom as well. Yes, even standard ...
0
votes
0answers
53 views

INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY, insufficient access rights on cross-reference id. Inserting Account as Customer Community User in Test

I have a simple Apex controller method: @AuraEnabled public static Boolean addAccount(String companyName) { try { Account acc = new Account(); acc.Name = companyName; ...
1
vote
1answer
33 views

Dev Platform - Custom Object

I just created a developer org for a customer presentation. I have created a special object from the object manager. When creating, a warning message appears: "Permissions for this object are ...
0
votes
0answers
27 views

Cant Find Manage External User Permissions? [duplicate]

I want to use Manage external User For community for which i need to add that button on layout.button not visible on any of the layout. External Sharing Model Enabled. Customer community created. ...
0
votes
1answer
73 views

Downloadlink not working for Guest user site

I have created a link on a visualforcepage for Guest user.The link shows correctly with the correct id. When I try to download the link a new page is opened with the error: urlsite/ex/...
0
votes
1answer
145 views

Update failed. INSUFFICIENT_ACCESS_OR_READONLY, You do not have the level of access necessary to perform the operation you requested

Background I have created a custom upload component based on this but using ContentVersion rather than Attachment. This custom upload component is being used on a public community page and has an ...
0
votes
1answer
57 views

Restrict API permissions for package

I'm creating a package that allows Salesforce API access via a connected app. It works great in my demo org, but our customer does not want it to have access to any data other than contacts and a new ...
0
votes
1answer
79 views

“Allow Delete Only If” Permission

Disclaimer: Permission settings newbie here. In my org, there are 3 departments. I've set up a role hierarchy with three branches where each head of department (HOD) is at the top. Underneath is ...