#SecureMyGuestUser0 discutindo

Hello, I installed GUAR app to review the guest user access and on the AuraEnabled Apex Profile Permission Information (1997) table everything is yellow. I checked the VF Page Access and APEX class access but none of my guest user profiles have access to any VF or APEX. 

Can you help me understand why is this table all yellow? Thank you so much for your help! 

#Salesforce Developer

@* Salesforce Developers *

I'm working through Account obj for records due to manual and/or apex sharing. I ran the query and have the 15 rcds that need to be deleted. I can't get to the AccountShare rcds, so I'd like to use the <Sharing> button, found on each Account. When I click <Sharing> and have the list, what am I deleting? The Guest User, reason - assoc guest user sharing? Please advice. Thank you! #SecureMyGuestUser

Hi #SecureMyGuestUser 

I have removed historical data that are under 'Total Number of Records Owned' and manual or apex sharing information. But, I cannot remove them from 'Total Number of Records with Access To' or 'Profile Read Access and Create access' to certain guest users as that would break our business process. Can we leave it as it is? Or, should I need to do any changes regarding this report? Can you please suggest what I need to do with this report. 

Thanks,

Dinesh

Hi! 

I'm going through https://www.learnexperiencecloud.com/s/article/Guest-User-Security-Beyond-Spring-21-Securing-Historical-Data to secure our historical data. Is there anything I need to do with the records listed under the "Total Number of Records with Access To"? I don't see anything in the article about this particular column but I have a few hundred for 2 objects and want to determine if any changes need to be made.

Thanks!

#SecureMyGuestUser 

I have followed all of the steps in the Quip document but when attempting to run the guest access report I am asked to log in to the community.  I do not have a user log in because it is a customer community.  I do not have any available licenses so how do I create a log in so that I can run the report for that profile? #SecureMyGuestUser

Hi #SecureMyGuestUser,

1. I have installed Guest User Access Report app from app exchange by below link .

https://appexchange.salesforce.com/appxListingDetail?listingId=a0N3A00000FR6GaUAL

2.  Provided access for gaur.guestaccessreport vf page from profile.

3.  Clicked on gaur admin app and  gaur.guestaccessreport vf has access also.

4 .  Open last column url  in icognito  mode in chrome browser but we can't see the report.

Kindly help asap and we have raised a ticket to salesforce but salesforce suggested to help by  #SecureMyGuestUser.

Note - I followed below document.

https://quip.com/aWcoA41BP0GM

Thanks,

Deepak

Hi #SecureMyGuestUser

I have installed and run the report. We used to use site guest user on our sites but now we don't. If my site is disabled, should I be worried about the potential risk that the report is showing me. We do not use any site and guest user at the moment. Even to run the report I had to activate the site so it could generate the report.

Also, one of the other sites show "Authorization required" but we do not login to access that site.

Please let me know.

--

Thanks,

Richa Sharma

 #SecureMyGuestUser

Hi, 

GUAR has been installed.    “guar.guestaccessreport" granted to guest user profile by  adding   to the Enabled Visualforce Pages section.

On  “GUAR Admin” app, Guest User Access Report Link is provided.  When link is accessed , it shows Page Not Found.

Community template is Salesforce Tabs+Visualforce 

Thank You

Hello #SecureMyGuestUser

I ran the GUAR report . The custom object "Profile Read Access"  says potential risk (yellow) as the Guest User profile has "Read" access on that object.

As the Guest user needs to create records on the custom object as per the functionality, I assume we can ignore this and keep the object settings as is. Also the USER standard object has potential risk(red) for Manual Sharing. 

The profile permission information has potential risk(red) for some of the permission names. But I do not have any permission sets of those names in my org. In addition it shows potential risk with all of our AuraEnabled Apex Profile Permission. Please help me understand how to resolve the potential risks and also help me understand where are the permission names being displayed from.

#SecureMyGuestUser

Hi, I would like to confirm if the GUAR can be saved or downloaded as PDF ? 

Thank You