[SalesForce] How to know Profile permissions on an object

Suppose I have a profile PA_User and I want to know what kind of permissions(create, edit, view all, modify all etc) this profile has on Account, opportunity, PAUser (custom object) objects using APEX. How can I get this information?

Best Answer

You can check the DescribeSObjectResult for a given object to see if the user can read (queryable), create (createable), update (updateable), or delete (deletable). You can't ascertain if the user has View All Data or Modify All Data, however, as this information isn't available in the normal API. There is an app that can describe a profile's extended permissions and cache them for querying within salesforce.com, but I can't seem to find it right now; you'll need to look around for it. Comments or updates to the answer for the link to that app would be appreciated.

Related Solutions

[SalesForce] How to access profile permissions via API

Actually, the PermissionSet SObject has a field in it called IsOwnedByProfile. Take a look at this blog post by Adam Torman, http://blogs.developerforce.com/engineering/2012/06/using-soql-to-determine-your-users-permissions-2.html:

This field determines whether a permission set is a custom one or if it is parented by a profile. This is made possible because for every profile, there is one underlying permission set. That way, permissions layer equally across permission sets without having to treat a profile differently.

So, if you want to find the CRUD permissions of a profile you can do something like this:

SELECT Id, SObjectType, PermissionsRead, PermissionsCreate
FROM ObjectPermissions
WHERE parentid in (select id from permissionset where
PermissionSet.Profile.Name = 'System Administrator')

[SalesForce] Retrieving Profile with all Components Permissions using Metadata API

Quick answer: no.

Long answer: There is no current way to do this without fetching them all and then ignoring the unnecessary stuff. The product managers know about this and have received enough feedback from the field. They are working on it but no solution right now.

I would love to be wrong about this though.

Good luck!

Sridhar

Best Answer

Related Solutions

[SalesForce] How to access profile permissions via API

[SalesForce] Retrieving Profile with all Components Permissions using Metadata API

Related Topic