Apex Security Review - Herson100/ProjectOne GitHub Wiki

Apex Security

How is record level security enforced?

  • declared in the class declaration, not sharing is default

What are the options for this and what do they mean?

  • with sharing- record level security
  • without sharing- doesnt support record level security (SYSTEM CONTEXT BY DEFAULT)
  • inherited sharing- inherited security
  • _share

How is Object and Field level security enforced?

  • With SECURITY_ENFORCED- throws exceptions
  • SECURITY.StripInaccessible() -
  • Schema Class

What declarative tool is Apex Sharing similar to by default?

  • sharing settings