Questions tagged [security]

Salesforce user security is an intersection of sharing, user, Profiles, roles, roles hierarchy and object permissions.

Filter by
Sorted by
Tagged with
3
votes
2answers
3k views

How to use Self-Signed CA for 2-way SSL?

I would like to use Self-Signed CA of Salesforce to build a 2-way SSL connection with my Web Server. The Web Server is built on Apache 2.2 and the 1-way SSl test is fine. In the 2-way SSL test, the CA-...
12
votes
2answers
7k views

Deploying Profiles / Permission Sets that include object & field permissions for Managed Objects

Anyone know if it's possible to deploy profiles/permission sets via Eclipse or an Unmanaged Package that contain object & field permissions for 3rd party managed objects? I'm trying to deploy a ...
4
votes
3answers
1k views

Exposing the contract object in the customer portal

I have a customer portal where we expose different types of records to users who need to see only records that belong to the same Account as theirs. The portal is built using Visualforce pages and a ...
4
votes
1answer
7k views

Would I be able to restrict Pricebook visibility?

Would i be able to Restrict visibility into pricebooks? I would only want certain people to select a pricebook. Currently I am granting access using hierarchies. Would it be possible to restrict ...
10
votes
2answers
2k views

Why do we provide security access to apex classes

I have a visualforce page 'TestPage' which has access to all the profiles in my organization(say A,B and C). This page has a controller 'TestController'. This controller has access only to two ...
8
votes
4answers
16k views

What overrides a profile?

I am confused about the hierarchy of settings 1) I have a profile A and it has a read only access. I have a permission set specific to an user and the permission set grants the user access to edit ...
6
votes
1answer
2k views

Prevent Username from being logged into multiple sessions and/or IP addresses Concurrently

Has anyone fielded a request to prevent a username from logging into multiple sessions at once? The problem is that currently Salesforce does not have declarative way of preventing logins, of the ...
33
votes
2answers
17k views

How to access profile permissions via API

If I know the name of a certain profile, I would like to obtain CRUD permission settings for each object in the profile using Apex. I see that there is an sObject called Profile, but this only ...
2
votes
1answer
547 views

Sharing documents with High volume portal users

My problem is similar to this but also with the added problem of security. High Volume Customer Portal user - Insufficient Privileges for non-image Documents I want only a certain group of people (...
61
votes
8answers
51k views

What is the best way to deploy profiles in Salesforce? (especially system admin)

What is the best way to deploy profiles in Salesforce? I have a system admin profile with access given to the objects that i have created in my sandbox. I have about 1000 fields across these objects. ...
4
votes
3answers
313 views

Database.com licenses in a Salesforce org

It seems it is possible add Database.com users into a 'normal' Salesforce.com org (i.e. a standard EE or UE org) to allow large numbers of users cheaper access to API and OAuth based authentication. ...
20
votes
5answers
3k views

Is it possible to have different password policies for different users?

Can I have a certain profile to have a password change policy of 1 year, and other profiles (or the rest) as change every 60 days? I know you can set it for the entire organization, I need to specify ...
1
vote
2answers
110 views

OneApp Profile having View All access to Accounts

I am attempting to allow a group of Force.com OneApp users to be able to Modify All on a custom object that is the child in a Master-Detail relationship with Account. The security access on our ...
79
votes
7answers
13k views

Apex static code analysis

What static code analysis tools are there for apex? The only one I seem to be able to find is the Force.com Security Source Code Scanner but that has the draw back of placing your request into a queue ...
2
votes
2answers
1k views

Sandbox settings in Single sign on org

I created a new sandbox for my org. I am trying to activate a developer sandbox and I am struck there. All I see is a refresh link and login link. I am unable to see the activation link. I have ...
17
votes
3answers
47k views

How to find the reason for Insufficient Privileges?

I am going through the "Development with the Force.com Platform" book and have run into an issue when implementing the sample application from the book. The example is to demonstrate manual sharing: ...
7
votes
5answers
4k views

“Lock” Old Opportunities so They Can't Be Edited

For auditing purposes, we'd like to lock Opportunities that have been closed for 90 or more days so that they can't be edited anymore, (except perhaps for a super-user profile, but you don't need to ...
5
votes
1answer
210 views

Determine org. wide security on an object

I'm trying to determine (in APEX) what the security level is of a custom sObject (for a UI) For example: mysObject__c (Public Read Only, Private, etc.) I know it's possible to test the by inserting ...
8
votes
4answers
5k views

Hide Report Types from Users?

I know that Report Types are hidden from Users who don't have access to the underlying objects. Is there a way to block Users from building new reports with standard Report Types? Use Case: We have ...
45
votes
4answers
28k views

Can I get my security token without having to reset it?

I need to get a user's security token but there are other things currently using it so I don't really want to reset it. Is there any way to retrieve this without having to reset it?
4
votes
3answers
3k views

Can I grant different field-level security based on record ownership?

I have some fields on an object that contain private information. While the object itself should be visible to an entire group of users, I would like tighter control over those specific fields: I ...
2
votes
1answer
113 views

Triggering to check for changes in org level sharing rules

Does anyone have a solution for checking for changes in sObject__Share settings on particular objects in APEX
2
votes
2answers
700 views

Chatter Group security permissions

Salesforce seems to lack a security model around a records and their children as it pertains to Chatter groups (Salesforce user groups have one). Chatter groups can't own sObjects that secures them ...
2
votes
1answer
359 views

Creating a method that ensures safe HTML input

We're building an app that requires the user to be able to input raw HTML (for a design template) and then be able to display that within SFDC. The challenge we've found in a security process is that ...
26
votes
10answers
12k views

Can I compare Profiles?

We have many profiles in our org, and I suspect that some of them are redundant because the person who originally set them up didn't seem to understand the purpose of Profiles (confusion with Roles, ...
6
votes
2answers
3k views

How do you change profile level security permissions on an app after it's been installed?

I recently had an app that had been installed a while ago. In the mean time we had created a new profile type which, since it hadn't existed when the app was first installed, didn't have permissions ...
15
votes
1answer
408 views

Any docs on the permissions of the special InstallHandler package user?

InstallHandler is the interface you implement for a post-install script in a managed package. Per the docs: It runs as a special system user that represents your package, so all operations ...
7
votes
7answers
737 views

How to detect and block visual force page from scraping?

We are considering developing a new version of our website (where our customers can purchase and manage certain types of content) on the force.com platform. Looking into the impact of governor limits ...

1
11 12 13 14
15