Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 14807

Salesforce user security is an intersection of sharing, user, Profiles, roles, roles hierarchy and object permissions.

4 votes
2 answers
1k views

Tightening security around Javascript Remoting from Visualforce

In doing so, security can pass whichever user ID they would like and our Apex remote method will take that User ID without issue (since there is no security being enforced). … We cannot change the security here due to our org complexity so we cannot use Salesforce's security/sharing rules to tighten security. …
Ryan Werner's user avatar
2 votes
0 answers
151 views

Salesforce security issue - Account owner's role of community user is given access to accoun...

We have a security requirement where certain accounts should only be visible to a certain public group. To enable this we have a checkbox on the account and set our OWD to private. … Linking non-private account contacts to a private account via a case has legitimate use in our org, we just don't want this to open up security to the role of the non-private contact's account owner's …
Ryan Werner's user avatar
1 vote
1 answer
1k views

What permissions on a profile/permission set should be considered "privileged user" or "syst...

I am performing analysis into the security of our org. Previously we had very relaxed rules around privileged user access in our org. …
Ryan Werner's user avatar
4 votes
2 answers
3k views

How can I encrypt a string in Apex in a way that an external system can decrypt using C#?

Our security team has found an issue in our lightning experience site where a link to an external system is adding the account # in the URL. …
Ryan Werner's user avatar