Skip to main content

#Secure Guest User0 discutindo

The Run Flows permission will be removed from all orgs starting in the Summer ‘22 release. To avoid future access issues, we recommend updating your existing sites to the new permission structure before the Summer ‘22 release. To update your flows, select Override default behavior and restrict access to enabled profiles or permission sets and provide granular flow access for your guest users.  Now I follow the steps of :

- create a flow.

-Click edit access

-Enable Override default behavior and restrict access to enabled profiles or permission sets

-Go to guest user profile and enable the flow

When I go to the community the flow doesn't run, what is happening?Do I need make something more?

The documentation I followed is : https://help.salesforce.com/s/articleView?id=sf.flow_distribute_security.htm&type=5 

 

Thank you in advance!

@* Salesforce Administrators * #Experience Cloud #Flow #Site Guest User #Secure Guest User

17 respostas
0/9000

Hi..does anyone know how a Guest user licence work.. There are two profiles associated with the Guest Licence...(Guest community user and calendars profile) There are one user assigned to each profile.. As much as I know if a user is assigned this licence then they don't require log-in to access.. However if they don't login then how do they access the relevant sites? #Licenses #Guest Users #Unauthenticated Guest Users

0/9000

Hello, as with most posts on here we are having an issue with the Secure Guest User change. We have a record page for a custom object that we need to be shared with the community guest user. The page has a lightning component that is pointing to an apex class using without sharing. We have created a sharing rule for the custom object for Owner Id Begins with 005 and every time the record page is accessed by a guest they are redirected to the login page, instead of going to the record page before Winter 21. Any help would be appreciated, our support tickets go unanswered for a week or two at a time and this is our production environment. 

9 comentários
  1. 2 de set. de 2021, 15:51

    @Nick McGinnis If you use Apex without sharing, you're bypassing the guest user security policy. It looks like your page is requesting a resource that is not exposed to the guest user (thus probably not in the scope of the "apex without sharing" code). I'm not a developer so take my input with a grain of salt.

     

    Here's useful resources on the Guest User Security policy and implementation:

    Guest user security policy and timelines  

    Guest User Security Considerations & Best Practices

     

    cc: @George Abboud

0/9000

@George Abboud @Fabrice Talbot @Sangita Gupta @Yelena Kamyshina 

 

Hello all, 

We have a use case for a custom community where Guest users should be able to create and retrieve Case and Contact data. As soon as we enable the Guest User Security Settings, Guest users can no longer create and access Case records even when the default internal and external access are Public Read/Write.

 

We did create a sharing rule to provide access to Guest users but that also does not seem to work since the sharing rule only has Read Only option.

 

Could one of you help us here? Are we missing something here?

4 comentários
0/9000

Our guest user profile is only used for opening new case records on our community involving screen flows.  these will definitely be broken as guest users can no longer hold ownership of object records.

 

Guest users also can access knowledge and articles.  If these have to be locked down, how would I open up access again for the guest user?  In sharing settings, I don't see anything for knowledge, topics, or articles? #Secure Guest User 

6 comentários
  1. 24 de abr. de 2020, 22:39
    wow...that's what you get when you type and multi-task...I've edited my post above...
0/9000

Hi there, 

As part of the Guest User access impact, has anyone encountered the error

'system.VisualforceException: Update access denied for LotteryApplication__c, controller action methods may not execute.'

Because of which one had to change the existing implementation from Standard Controller to Custom Controller impl for the page used in Guest User Context?

 

so the usage of apex:inputHidden tag is causing this issue.

 

Please let me if anyone else faced such issues?

 

This has led to a lot of design changes to existing implementations related to communities using Guest User functionalities.

0/9000

Hi everyone:

 

I have an "Unauthenticated Community" that comes with the Enterprise Edition, set to "Public Access," but the Tile Menu, Knowledge Articles, and all other pages are still locked behind the Login Page.

 

Do I need to manually assign the Guest User Profile to users or change the site's "Public Access Settings?"

 

Your insights would be greatly appreciated!

 

Thank you in advance!

1 comentário
  1. 13 de abr. de 2020, 17:32
    Hi @Jennifer Jaw you do not need to assign the Guest User profile. Any internet traffic that comes to your site automatically uses the Guest User profile. However, you should test to ensure that guest see the intended info once the guest user security policy is enables
0/9000

Hi Experts,

 

This is just a general question, I hope you can help me.

 

With the new sharing model, we can define criteria on objects and specify which records to share using Guest User Sharing. However, we can no longer select users to share with using Public Groups.  

 

How do we go about specifying which guests can we share records with if we only have one Guest User Profile per site?  For example, if we have different kinds of guests per public site, would it be possible to specify which guests can we share the record with?

 

Thanks!

 

#SecureCommunities

#SecureMyGuestUser

1 comentário
0/9000

Good day 

We have customer communities with public access - guest user on custom objects that require READ/EDIT

My understanding is that the EDIT will be removed from the guest user profile OBJECT CRUD setting.

I see feedback that this will be handled by apex sharing settings - is this correct?

 

Basically, guest user will require ability to go back to a custom record that it created earlier in the process, and edit it. It does still own the custom object record.

 

How are we meant to handle this scenario?

10 comentários
0/9000

I'm having trouble with the Secure Guest User setting change. Our community was setup by a consultant we no longer work with. My understand is we have a Guest Community User which creates all Community Portal users. When a Community Portal User is created, they pass through a generic Household account before their own contact and household account are created. However, when we turn on the Secure Guest User setting and a Community Portal User is created, they get stuck in the generic Household account and need to be manually removed and split into their own household.

 

I'm trying to utilize the Guest User Access report app to help guide what I should be doing to check our readiness for this setting change, however I can't get the URL to go to the report. Instead it just goes to our login/registration page. This is the step I'm referring to in the instructions:

"From a private browsing session, or one that you are not logged into the org where the package is installed, navigate to https://[communityDomain]/[communityPrefix]/apex/guar__guestaccessreport running as Guest User"

 

Additionally, when I look into creating a Sharing Rule to ensure there is no issue with enabling this setting, I can't figure out how I would disseminate it to our custom External Identity Profile users. They aren't (and moving forward can't be) in a public group, they have no Role, and when I try to choose Portal user role, I see a list of individuals. 

 

Can anyone help me? Happy to grant login access or provide more details! In the short term I know we can revert the setting update but it sounds like that won't be an option with the Summer '20 release.

9 comentários
  1. 24 de fev. de 2020, 20:23
    The only other possibility is if you have development support in your salesforce support package, which is essentially hours for which support can be assigned to look into your custom code (like a developer consultant service but it's through salesforce development support). If you don't have that package \ option, then you will pretty much need to find a developer who can assist you, given that this is a custom implementation, so someone will have to spend the time to debug and fix.
0/9000