Highlights
- Compatibility with the Salesforce Spring 20 Security Updates
Update Details
Socialsuite 3.1 includes important security updates that enable the public-facing pages we provide (such as the Survey page and Registration page) to continue working with the new Salesforce security features that are rolling out in March 2020.
The new setting “Secure guest user record access” will apply a number of restrictions to Site guest user accounts which control the functionality available to public-facing pages in Force.com sites and also public Community pages:
- Org-wide defaults set to Private for all objects, including objects not listed on the Sharing Settings page. This access level can’t be changed.
- Can’t be added to queues or public groups.
- Can’t be given access to records through manual sharing or Apex managed sharing.
- Can be granted Read Only access to records through guest user sharing rules. Guest user sharing rules are a special type of criteria-based sharing rule.
Updates have been made to both the survey and registration pages, to ensure that the new sharing rule limits and Private sharing settings do not prevent these pages from retrieving and updating the records necessary for them to operate as normal.
Please note that customers wishing to configure additional custom configuration elements such as Process Builder flows or triggers may need to take these new restrictions into account – for further details see the information available here: https://www.learncommunitycloud.com/s/news/everything-you-need-to-know-about-securing-public-sites-20Y1U000000UkRSUA0
FAQs
- Do I need to make any changes or up-skill staff.
No, The update does not include any user Interface changes. The Academy content will not be changing for this release. If you use Salesforce in other areas of your organisation that deals with Public facing pages or site guest users the Salesforce security release may affect these areas. Please discuss this with your Salesforce Administrator or Salesforce partner.
- Will this affect the security of my Socialsuite instance
No, the security update is adding more flexibility around what guest users (survey beneficiaries) are able to interact with. The Socialsuite 3.1 update will not change the security settings for your Socialsuite instance.