Security in Salesforce | Security for Salesforce Developers

Security in Salesforce: What Developers Must Know
0:00 Introduction
3:00 Agenda
4:05 Data security
5:18 User Mode & System Mode
9:13 CRUD & FLS Data Model
10:45 Enforcing CRUD & FLS
33:00 Record level sharing
33:51 Record Sharing Data Model
35:00 Record Sharing for Apex Class ( With Sharing , Without sharing)
44:55 Data Security with LWC
48:45 SOQL Injection
57:33 XSS
59:25 Locker Services
1:08:00 CRSF
- What is secure applications?
- Enforce data security
- Prevent SOQL injection
- Locker Service
- Security best practices for LWC
Follow us for upcoming session
LinkedIn : / apexhours
Twitter : / apexhours​
Blog : www.apexhours.com/subscribe-us/​
Twitter Amit Chaudhary : / amit_sfdc

[@apexhours]

Check PPT and blog post here www.apexhours.com/security-in-salesforce/

[@satishakumar1073]

One stop for all Salesforce related help, thankyou

[@dkji0]

Okay okay okay . Really awesome session.

[@apexhours]

Thanks for your feedback

[@TheSooriBro]

Thanks much for this excellent content!!

[@apexhours]

Glad you enjoy it! Salesforce security is one of the most important part of salesforce

[@sheetalgodse4242]

Thank you so much for this useful content!!

[@apexhours]

Glad it was helpful!

[@MUHAMMADUSMAN-rx9df]

very good explanation never thought that in the beginning it becomes that good .Keep it up nice work

[@apexhours]

Glad you liked it

[@pavloshchur3684]

Great session!

[@apexhours]

Keep watching

[@pavankumar-ff9bo8zc5y]

Thank you!!

[@apexhours]

You're welcome!

[@user-js4px6fe1p]

Beer and security - great examples!

[@apexhours]

Glad you like it

[@pwnweb5734]

This was excellent. Real nice implementation in SOQL itself .. gg

[@apexhours]

Glad you liked it!

[@MrPrateeksrivastava]

8llll

[@starman9000]

Valuable Content ! for me Apex Hours is one stop for all SF technical stuff! Thank you all the wonderful people who are behind the scene.

[@apexhours]

Thanks, Amit Chaudhary

[@nayanmore1615]

Thanks a lot!

[@apexhours]

You're welcome!

[@ankitchauhan707]

very Informative session

[@apexhours]

Glad you think so!

[@abhimanyusingh9093]

Great session

[@apexhours]

Glad you like it

[@rshyam36]

Good going...

[@apexhours]

Keep watching

[@NITHESHKHERO]

Nice one

[@apexhours]

Thanks 🔥

[@kiranvrao9714]

Thank you

[@apexhours]

You're welcome

[@gunjanjanwani7845]

Thank you so much for this excellent content!! Can you please share the recipe of the examples you mentioned in the session

[@apexhours]

Glad you like it

[@shoubhikmaity]

Nicely elaborated. is it possible to do a new video with the latest Salesforce update on Security like the usage of AccessLevel.USER_MODE, AccessLevel.SYSTEM_MODE, WITH USER_MODE, WITH SYSTEM_MODE etc.?

[@shubhampandey7489]

Hi all . Just wanted to know if we could insert content distribution record as guest user using the system mode .eg insert as system cdList.

[@nikhilkarkra1810]

What's the alternative of setTimout or setInterval if we have to avoid?

[@SamuelCarreira]

Yes, I’m curious also since even on LWC recipes they use setinterval

[@AlbaRivasSalesforce]

@@SamuelCarreira @Nikhil Karkra, if you just need to put the execution at the very end of the event loop you can just create a promise. If you do need to use setTimeout or setInterval, the important thing is to not use it as if it was eval(), passing it a string to evaluate. For instance, setTimeOut( “alert('whatever')”, 3000); would be vulnerable to xss, but if you pass a function that's fine.

[@apexhours]

Thanks @Alba for your help

[@salesforcetroop]

@@AlbaRivasSalesforce Thanks. for your reply. If we have should stay away form DOM manipulation like lwc:dom="manual". How we can render the html that comes as response from apex to our DOM without lwc:dom="manual"?

[@AlbaRivasSalesforce]

@@salesforcetroop using template:foreach and template if:true!

[@pavankumarv6849]

Hi Team, I just wanted to know is there any CYBER-SECURITY career in Salesforce???

[@apexhours]

Nice question. But I never heard about that for any client implementation

[@sugarontherimplz]

Spends 10 min on explaining what shes NOT gonna talk about lmao

[@AlbaRivasSalesforce]

Sorry, what topic do you mean? I can provide more information if needed :)

[@apexhours]

Let us know how we can help you