salesforce_security_impl_guide

More documents

Recommendations

Info

Securing and Sharing Data Setting Access to fields in each object Record types Login hours Login IP address ranges Executable Apex classes Executable Visualforce pages External data sources Service presence statuses Custom permissions To View or Edit... Viewing and Editing Tab Settings in Permission Sets and Profiles Under the Field-Level Security section, click View next to an object name. Under the Record Type Settings section, click Edit next to a tab name. The Edit link is available only if record types exist for the object. Under the Login Hours section, click Edit. Under the Login IP Ranges section, click New, or click Edit next to an existing IP range. Under the Enabled Apex Class Access section, click Edit. Under the Enabled Visualforce Page Access section, click Edit. Under the Enabled External Data Source Access section, click Edit. Under the Enabled Service Presence Status Access section, click Edit. Under the Enabled Custom Permissions section, click Edit. Viewing and Editing Tab Settings in Permission Sets and Profiles Tab settings specify whether a tab appears in the All Tabs page or is visible in a tab set. 1. From Setup, click Manage Users, then click Permission Sets or Profiles. 2. Select a permission set or profile. 3. Do one of the following: • Permission sets or enhanced profile user interface—In the Find Settings... box, enter the name of the tab you want and select it from the list, then click Edit. • Original profile user interface—Click Edit, then scroll to the Tab Settings section. 4. Specify the tab settings. 5. (Original profile user interface only) To reset users’ tab customizations to the tab visibility settings that you specify, select Overwrite users' personal tab customizations. 6. Click Save. Note: If Salesforce CRM Content is enabled for your organization but the Salesforce CRM Content User checkbox isn’t enabled on the user detail page, the Salesforce CRM Content app has no tabs. EDITIONS Available in: • Enterprise • Performance • Unlimited • Developer USER PERMISSIONS To view tab settings: • “View Setup and Configuration” To edit tab settings: • “Manage Profiles and Permission Sets” 20
Securing and Sharing Data Enable Custom Permissions in Profiles Enable Custom Permissions in Profiles Custom permissions give you a way to provide access to custom processes or apps. After you’ve created a custom permission and associated it with a process or app, you can enable the permission in profiles. 1. From Setup, click Manage Users > Profiles. 2. Select a profile. 3. Depending on which user interface you’re using, do one of the following. • Enhanced profile user interface: Click Custom Permissions, and then click Edit. • Original profile user interface: In the Enabled Custom Permissions related list, click Edit. 4. To enable custom permissions, select them from the Available Custom Permissions list and click Add. To remove custom permssions from the profile, select them from the Enabled Custom Permissions list and click Remove. 5. Click Save. EDITIONS Available in: • Enterprise • Performance • Unlimited • Developer USER PERMISSIONS To enable custom permissions in profiles: • “Manage Profiles and Permission Sets” Assigning Record Types and Page Layouts in the Enhanced Profile User Interface In the enhanced profile user interface, Record Types and Page Layout Assignments settings determine the record type and page layout assignment mappings that are used when users view records. They also determine which record types are available when users create or edit records. To specify record types and page layout assignments: 1. From Setup, click Manage Users > Profiles. 2. Select a profile. 3. In the Find Settings... box, enter the name of the object you want and select it from the list. 4. Click Edit. 5. In the Record Types and Page Layout Assignments section, make changes to the settings as needed. Setting Record Types Description Lists all existing record types for the object. --Master-- is a system-generated record type that's used when a record has no custom record type associated with it. When --Master-- is assigned, users can't set a record type to a record, such as during record creation. All other record types are custom record types. EDITIONS Available in: • Enterprise • Performance • Unlimited • Developer USER PERMISSIONS To edit record type and page layout access settings: • “Manage Profiles and Permission Sets” Page Layout Assignment The page layout to use for each record type. The page layout determines the buttons, fields, related lists, and other elements that users with this profile see when creating records with the associated record type. Since all users can access all record 21
Page 1 and 2: Security Implementation Guide Versi
Page 3 and 4: CONTENTS Chapter 1: Security Overvi
Page 5 and 6: Contents Editing Lead Sharing Rules
Page 7 and 8: CHAPTER 1 Security Overview Salesfo
Page 9 and 10: Security Overview User Security Ove
Page 11 and 12: Security Overview Custom Permission
Page 13 and 14: Security Overview CAPTCHA Security
Page 15 and 16: Security Overview Auditing • Role
Page 17 and 18: Securing and Sharing Data Revoking
Page 19 and 20: Securing and Sharing Data Viewing P
Page 21 and 22: Securing and Sharing Data Cloning P
Page 23 and 24: Securing and Sharing Data App and S
Page 25: Securing and Sharing Data Working w
Page 29 and 30: Securing and Sharing Data Assigning
Page 31 and 32: Securing and Sharing Data Creating
Page 33 and 34: Securing and Sharing Data Editing P
Page 35 and 36: Securing and Sharing Data Searching
Page 37 and 38: Securing and Sharing Data Enable Cu
Page 39 and 40: Securing and Sharing Data Object Pe
Page 41 and 42: Securing and Sharing Data Comparing
Page 43 and 44: Securing and Sharing Data Setting F
Page 45 and 46: Securing and Sharing Data Working w
Page 47 and 48: Securing and Sharing Data Setting L
Page 49 and 50: Securing and Sharing Data Restricti
Page 51 and 52: Securing and Sharing Data Managing
Page 53 and 54: Securing and Sharing Data External
Page 55 and 56: Securing and Sharing Data Disabling
Page 67 and 68: Securing and Sharing Data Editing L
Page 69 and 70: Securing and Sharing Data Editing C
Page 71 and 72: Securing and Sharing Data Editing C
Page 73 and 74: Securing and Sharing Data Sharing R
Page 75 and 76: Securing and Sharing Data User Shar
Page 77 and 78:
Securing and Sharing Data Sharing U
Page 79 and 80:
Securing and Sharing Data Creating
Page 81 and 82:
Securing and Sharing Data Viewing A
Page 83 and 84:
Securing and Sharing Data Granting
Page 85 and 86:
Configuring Salesforce Security Fea
Page 87 and 88:
Page 89 and 90:
Page 91 and 92:
Page 93 and 94:
Page 95 and 96:
CHAPTER 4 Enabling Single Sign-On S
Page 97 and 98:
Enabling Single Sign-On • Before
Page 99 and 100:
Monitoring Your Organization's Secu
Page 101 and 102:
Page 103 and 104:
Page 105 and 106:
Page 107 and 108:
Security Tips for Apex and Visualfo
Page 109 and 110:
Page 111 and 112:
Page 113 and 114:
INDEX A Access about 10 revoking 11
Page 115 and 116:
Index Profiles (continued) object p
show all

salesforce_security_impl_guide

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?