Skip to main content

#Ladies Be Architect3 discutindo

Agents have FLS for most fields on opportunity and we have something called SA1 records. Those are the records owned by 'System Admin 1' user. Agents can access those records from a related list. But we wanna restrict them to search for Opportunities with just email or phone. They should not be able to find say opportunities in a particular state or address from global search.

#Salesforce Developer #Salesforce Admin #Systems Administrator #Administrator #Advanced-Administrator #SF Developer #Platform Developer #SF Developers #Application Architecture #Ladies Be Architect
2 respostas
  1. 11 de out., 01:38

    Hi @ATU PANDU Salesforce Global Search doesn't support restricting searches to only Email and Phone fields for specific users.

    A few options to consider:

    1. FLS: Remove access to State and Address fields if agents don't need them.
    2. Search Manager: Check whether unwanted fields can be excluded from search indexing.
    3. Search Layouts: These control which fields appear in results, not which fields can be searched.
    4. Custom LWC with Apex: Build a search component that allows agents to search Opportunities using only Email or Phone.

    Since agents still need access to SA1 records, a custom LWC would be a good option.

    Important: Custom search alone won't restrict standard Global Search. You'll also need to review field permissions and other available search paths.

    Hope this helps!

0/9000

In both Authorization Code and Credentials Flow for Customers and Partners and OAuth 2.0 Username-Password Flow user's Salesforce username-password is exchanged by the Third-party app with Salesforce Authorization server to obtain the access token.

In fact the Auth Code and Cred Flow passes the user's username password over browser call to obtain the auth code . Whereas , in Username-Password flow there is a possibility to do this exchange from the Third-Party app's backend-server to obtain the access token.

 

a. If the above is true , then is "Authorization Code and Credentials Flow for Customers and Partners" more / less / same secure compared to "OAuth 2.0 Username-Password Flow" ?

 

b. If more then how ?

 

c. If Less/same , then what should be most secure way to implement "headless login" for a Third-party app (client ) with Salesforce ( the resource server ) ?

 

#OAuth 2.0 #Headless Commerce #Community Cloud

@Gianluca Calcagni @Kannan Narayanan #Ladies Be Architect 

1 resposta
0/9000

1. Integrate with ABN lookup API ( a 3rd party api which provides ABN validation ) : Point-to-Point / IPaaS / on-Prem ESB 

2. Integrate with a cloud based application like Workday : Point-to-Point / IPaaS / on-Prem ESB

@Gregory Cook  #Integration  #MuleSoft Composer #Ladies Be Architect

1 resposta
  1. 31 de mai. de 2022, 00:38

    I always prefer a middleware based integration. Part of it is because it is more straightforward to troubleshoot and another is that it also guides you to create an integration that 'fails safely', ie - so that it that can automatically recover without missing any data in case there are any interruptions in the network paths, credentials, middleware platform, etc. 'Point-to-Point' integrations tend to be architected to work in real time, but may miss transactions if the receiving side doesn't accept the data, the data doesn't pass validation rules, etc. (usually a message bus is not part of a real time, point-to-point integration). If the 'cost of middleware' seems intimidating, check out NodeRed.org. It's an open source, node-js programming platform and  can be hosted on an AWS EC2 for <$5 per month.

0/9000
3 respostas
0/9000

Saturday is coming soon!  I'll be presenting at Virtual Dreamin' on how to bulk update field level security.

1 comentário
0/9000

@Suzanne Ferguson , Can we have the Review board mock question and answer recorded session? The main purpose of this mock Q&A session would be getting the idea, how much depth the review board question goes to. I have seen a couple of sessions in the Ladies Be Architect. But not sure whether these sessions resemble 10% of the actual review board Q&A. It would be beneficial for all the people who are preparing for the CTA. 

7 comentários
0/9000