salesforce_security_impl_guide

More documents

Recommendations

Info

Securing and Sharing Data Field Permissions Field Permissions Field permissions specify the access level for each field in an object. In permission sets and the enhanced profile user interface, the setting labels differ from those in the original profile user interface and in field-level <strong>security</strong> pages for customizing fields. Access Level Users can read and edit the field. Enabled Settings in Permission Sets and Enhanced Profile User Interface Read and Edit Enabled Settings in Original Profile and Field-Level Security Interfaces Visible EDITIONS Available in: • Enterprise • Performance • Unlimited • Developer • Database.com Users can read but not edit the field. Users can't read or edit the field. Read None Visible and Read-Only None User Permissions User permissions specify what tasks users can perform and what features users can access. For example, users with the “View Setup and Configuration” permission can view Setup pages, and users with the “API Enabled” user permission can access any Salesforce API. You can enable user permissions in permission sets and profiles. In permission sets and the enhanced profile user interface, these permissions—as well as their descriptions—are listed in the App Permissions or System Permissions pages. In the original profile user interface, user permissions are listed under Administrative Permissions and General User Permissions. EDITIONS The user permissions available vary according to which edition you have. To view permissions and their descriptions, from Setup, click Manage Users > Permission Sets, then select or create a permission set. Then from the Permission Set Overview page, click App Permissions or System Permissions. Desktop Client Access Overview Connect for Outlook, Connect Offline, Connect for Office, and Connect for Lotus Notes are desktop clients that integrate Salesforce with your PC. As an administrator, you can control which desktop clients your users can access as well as whether users are automatically notified when updates are available. To set permissions for Salesforce for Outlook, use the “Manage Email Client Configurations” permission. You can set users' access to desktop client by editing their profiles. The desktop client access options are: EDITIONS Available in: • Enterprise • Performance • Unlimited • Developer Option Off (access denied) Meaning The respective client download page in users’ personal settings is hidden. Also, users can't log in from the client. 38
Securing and Sharing Data Working with Desktop Client Access in the Enhanced Profile User Interface Option On, no updates On, updates w/o alerts On, updates w/alerts On, must update w/alerts Meaning The respective client download page in users’ personal settings is hidden. Users can log in from the client but can't upgrade it from their current version. Users can download, log in from, and upgrade the client, but don't see alerts when a new version is made available. Users can download, log in from, and upgrade the client. They can see update alerts, and can follow or ignore them. Users can download, log in from, and upgrade the client. When a new version is available, they can see an update alert. They can't log in from the client until they have upgraded it. Connect Offline is the only client available with Developer Edition. In Personal, Group, and Professional Editions, all users have the system default “On, updates w/o alerts” for all clients. Note: • Desktop client access is available only for users whose profiles have the “API Enabled” permission. • If users in your organization have a Connect for Outlook version earlier than 2.0 (such as version 115), and their profile setting is “Off (access denied)” or “On, must update w/alerts,” the error Invalid Salesforce API request may occur when they attempt to log in to Connect for Outlook. Users with Connect for Outlook 2.0 or later will see an appropriate descriptive message. If users can see alerts and they have logged in to Salesforce from the client in the past, an alert banner automatically appears in the Home tab when a new version is available. Clicking the banner opens the Check for Updates page, where users can download and run installer files. From their personal settings, users can also access the Check for Updates page, regardless of whether an alert has occurred. Working with Desktop Client Access in the Enhanced Profile User Interface Connect for Outlook, Connect Offline, Connect for Office, and Connect for Lotus Notes are desktop clients that integrate Salesforce with your PC. As an administrator, you can control which desktop clients your users can access as well as whether users are automatically notified when updates are available. Note: To access desktop clients, users must also have the “API Enabled” permission. On the Desktop Client Access page in the enhanced profile user interface, you can: • Change the desktop client access settings by clicking Edit • Search for an object, permission, or setting • Clone the profile • If it's a custom profile, delete the profile by clicking Delete • Change the profile name or description by clicking Edit Properties • Go to the profile overview page by clicking Profile Overview • Switch to a different settings page by clicking the down arrow next to the Desktop Client Access name and selecting the page you want EDITIONS Available in: • Enterprise • Performance • Unlimited • Developer USER PERMISSIONS To view desktop client access settings: • “View Setup and Configuration” To edit desktop client access settings: • “Manage Profiles and Permission Sets” 39
Page 1 and 2: Security Implementation Guide Versi
Page 3 and 4: CONTENTS Chapter 1: Security Overvi
Page 5 and 6: Contents Editing Lead Sharing Rules
Page 7 and 8: CHAPTER 1 Security Overview Salesfo
Page 9 and 10: Security Overview User Security Ove
Page 11 and 12: Security Overview Custom Permission
Page 13 and 14: Security Overview CAPTCHA Security
Page 15 and 16: Security Overview Auditing • Role
Page 17 and 18: Securing and Sharing Data Revoking
Page 19 and 20: Securing and Sharing Data Viewing P
Page 21 and 22: Securing and Sharing Data Cloning P
Page 23 and 24: Securing and Sharing Data App and S
Page 25 and 26: Securing and Sharing Data Working w
Page 27 and 28: Securing and Sharing Data Enable Cu
Page 29 and 30: Securing and Sharing Data Assigning
Page 31 and 32: Securing and Sharing Data Creating
Page 33 and 34: Securing and Sharing Data Editing P
Page 35 and 36: Securing and Sharing Data Searching
Page 37 and 38: Securing and Sharing Data Enable Cu
Page 39 and 40: Securing and Sharing Data Object Pe
Page 41 and 42: Securing and Sharing Data Comparing
Page 43: Securing and Sharing Data Setting F
Page 47 and 48: Securing and Sharing Data Setting L
Page 49 and 50: Securing and Sharing Data Restricti
Page 51 and 52: Securing and Sharing Data Managing
Page 53 and 54: Securing and Sharing Data External
Page 55 and 56: Securing and Sharing Data Disabling
Page 67 and 68: Securing and Sharing Data Editing L
Page 69 and 70: Securing and Sharing Data Editing C
Page 71 and 72: Securing and Sharing Data Editing C
Page 73 and 74: Securing and Sharing Data Sharing R
Page 75 and 76: Securing and Sharing Data User Shar
Page 77 and 78: Securing and Sharing Data Sharing U
Page 81 and 82: Securing and Sharing Data Viewing A
Page 83 and 84: Securing and Sharing Data Granting
Page 85 and 86: Configuring Salesforce Security Fea
Page 95 and 96:
CHAPTER 4 Enabling Single Sign-On S
Page 97 and 98:
Enabling Single Sign-On • Before
Page 99 and 100:
Monitoring Your Organization's Secu
Page 101 and 102:
Page 103 and 104:
Page 105 and 106:
Page 107 and 108:
Security Tips for Apex and Visualfo
Page 109 and 110:
Page 111 and 112:
Page 113 and 114:
INDEX A Access about 10 revoking 11
Page 115 and 116:
Index Profiles (continued) object p
show all

salesforce_security_impl_guide

Create successful ePaper yourself

Delete template?

Save as template?