salesforce_security_impl_guide

More documents

Recommendations

Info

Security Tips for Apex and Visualforce Development Data Access Control from users by user permissions, field-level security, or organization-wide defaults. This is particularly true for Visualforce pages. For example, consider the following Apex pseudo-code: public class customController { public void read() { Contact contact = [SELECT id FROM Contact WHERE Name = :value]; } } In this case, all contact records are searched, even if the user currently logged in would not normally have permission to view these records. The solution is to use the qualifying keywords with sharing when declaring the class: public with sharing class customController { . . . } The with sharing keyword directs the platform to use the security sharing permissions of the user currently logged in, rather than granting full access to all records. 106
INDEX A Access about 10 revoking 11 Administrative permissions 38 App permissions 38 Apps visibility, setting in permission sets 30 Archiving field history 95 Auditing fields 93–95 C Code security 100 Cookies 3 Creating groups 73 Criteria-based sharing rules 50 Custom objects permissions 33 Custom permissions about 5 creating 5 editing 6 enabling in permission sets 31 enabling in profiles 21 Custom views permission sets 26 Customer Portal organization-wide defaults 45 D Desktop clients setting user access 38–40 Development security 100 E Editing groups 73 Enhanced profile user interface about 16 apps 17 Enhanced profile user interface (continued) desktop client access 39 system 17 External organization-wide sharing settings disabling 49 F Field-level security permission sets 38 profiles 38 Fields access 36–37 archiving history 95 auditing 93–95 field-level security 36–37 history 93–95 permissions 37 tracking changes 93–95 G General permissions 38 Groups about 72 creating and editing 73 member types 74 viewing all users 75 H History disabling field tracking 96 fields 93–95 I Inline editing permission sets 27 profiles 14 IP addresses trusted 40 whitelist 40 L Login activation 40 failures 92 history 92 hours, restricting 40, 44 107
Page 1 and 2:
Security Implementation Guide Versi
Page 3 and 4:
CONTENTS Chapter 1: Security Overvi
Page 5 and 6:
Contents Editing Lead Sharing Rules
Page 7 and 8:
CHAPTER 1 Security Overview Salesfo
Page 9 and 10:
Security Overview User Security Ove
Page 11 and 12:
Security Overview Custom Permission
Page 13 and 14:
Security Overview CAPTCHA Security
Page 15 and 16:
Security Overview Auditing • Role
Page 17 and 18:
Securing and Sharing Data Revoking
Page 19 and 20:
Securing and Sharing Data Viewing P
Page 21 and 22:
Securing and Sharing Data Cloning P
Page 23 and 24:
Securing and Sharing Data App and S
Page 25 and 26:
Securing and Sharing Data Working w
Page 27 and 28:
Securing and Sharing Data Enable Cu
Page 29 and 30:
Securing and Sharing Data Assigning
Page 31 and 32:
Securing and Sharing Data Creating
Page 33 and 34:
Securing and Sharing Data Editing P
Page 35 and 36:
Securing and Sharing Data Searching
Page 37 and 38:
Securing and Sharing Data Enable Cu
Page 39 and 40:
Securing and Sharing Data Object Pe
Page 41 and 42:
Securing and Sharing Data Comparing
Page 43 and 44:
Securing and Sharing Data Setting F
Page 45 and 46:
Securing and Sharing Data Working w
Page 47 and 48:
Securing and Sharing Data Setting L
Page 49 and 50:
Securing and Sharing Data Restricti
Page 51 and 52:
Securing and Sharing Data Managing
Page 53 and 54:
Securing and Sharing Data External
Page 55 and 56:
Securing and Sharing Data Disabling
Page 57 and 58:
Page 59 and 60:
Page 61 and 62: Securing and Sharing Data Creating
Page 67 and 68: Securing and Sharing Data Editing L
Page 69 and 70: Securing and Sharing Data Editing C
Page 71 and 72: Securing and Sharing Data Editing C
Page 73 and 74: Securing and Sharing Data Sharing R
Page 75 and 76: Securing and Sharing Data User Shar
Page 77 and 78: Securing and Sharing Data Sharing U
Page 81 and 82: Securing and Sharing Data Viewing A
Page 83 and 84: Securing and Sharing Data Granting
Page 85 and 86: Configuring Salesforce Security Fea
Page 95 and 96: CHAPTER 4 Enabling Single Sign-On S
Page 97 and 98: Enabling Single Sign-On • Before
Page 99 and 100: Monitoring Your Organization's Secu
Page 107 and 108: Security Tips for Apex and Visualfo
Page 109 and 110: Security Tips for Apex and Visualfo
Page 111: Security Tips for Apex and Visualfo
Page 115 and 116: Index Profiles (continued) object p
show all

salesforce_security_impl_guide

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?