-
How to apply Security of logged in user on Apex & VF in Salesforce page
Hello Everyone !
While going through manuals, it was mentioned Many times that apex classes will not consider security of logged in user but it will run in system mode and we should add custom controller extension to apply security of logged in user .
At the same time it is mentioned that every class has the value with sharing, which means that sharing keyword will apply security of logged in user
what is correct ? does apex classes apply security of logged in user ????
-
1 Reply
-
Apex class can be written in two category:-
- With sharing keyword:- If you declare a class as a With Sharing, Sharing rules given to the current user will be taken into the consideration and the user can access or perform the operations based on the permissions given to him on object and fields (Field Level Security, Sharing rules).
- Without sharing keyword:- If you declare a class as a Without Sharing, then this Apex class runs in system mode which means Apex code has access to all the objects and field irrespective of current users sharing rules, field level security and Object Permissions.
Ideally, for visualforce page, apex classes should run in with sharing to enable permission applicable for a user based on their profile.
Thanks
Abhishek shahi
Log In to reply.
