Timeline for Turn off access to Setup area in Salesforce
Current License: CC BY-SA 4.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 28, 2019 at 19:40 | answer | added | Charles T | timeline score: 3 | |
| Apr 28, 2019 at 15:48 | comment | added | wesaw | @CharlesT There are two use cases. 1) When our mobile app queries for SF objects via Rest API - querying for permission set tables or for User.ProfileId fields results in 'Object/field does not exist' error or whatever; 2) When we are querying for the same right inside apex classes - by default Apex does not enforce object/field level security, but we are doing it on our own in our custom data access layer - that's where we are getting 'No permission error' to read object or field. | |
| Apr 28, 2019 at 15:30 | comment | added | Charles T | That doesn't seem right - SOQL in Apex should still be able to access setup fields. SOQL doesn't enforce FLS on its own. And I've had no trouble with Apex querying permission sets while running as users with low privileges. Can you provide more detail on the context of how these failures are happening? E.g. what is the entry point to the transaction, what do your queries look like, and what line of code is throwing the exception? | |
| Apr 28, 2019 at 15:27 | comment | added | Renato Oliveira | You are right. I thought maybe permission sets could help, but it looks like it won't as well... | |
| Apr 28, 2019 at 15:23 | comment | added | wesaw | @RenatoOliveira Yes, we are querying those things through Apex. 'Without sharing' has nothing to do with objects and fields access, it controls access to records. But in our case, user is loosing access to query object/field at all, i.e. 'No such object/field' error. | |
| Apr 28, 2019 at 15:08 | comment | added | Renato Oliveira | The three items you mentioned, are they all examples of information that the user accesses through Apex? If so, did you try to route those requests through Apex classes with without sharing permissions? | |
| Apr 28, 2019 at 14:58 | history | asked | wesaw | CC BY-SA 4.0 |