[SalesForce] Pulling Permission Sets only through IDE polls a trimmed version of them

In Eclipse Force.com IDE I created a Force.com project that was configured to pull the Permission Set folder only. The Permission Sets have been pulled, but in what appeared to be a trimmed form – all had about 373 lines of code.

When I have deployed those Permission Sets to a SI environment is when I noticed that they were incomplete – what could be called skeletons of them have been deployed, but most of the configuration was not there.

Then I have chose to pull all Project Contents in Eclipse from Production. Those Permission Sets grew to nearly 4000 lines of code. I presume they must be a more complete version of them. I'm not sure as I haven't committed them to the repo and deployed yet.

Items that have been added are:

<classAccesses>, <fieldPermissions>, <objectPermissions>, <pageAccesses>, <tabSettings>

Can someone please explain to me why pulling Permission Sets only pulls them in trimmed form as opposed to pulling them with all other Project Contents?

Many thanks.

Best Answer

The Force.com IDE (eclipse plugin) is built on top of the Metadata API and uses it to populate the various files. The contents of a Permission Set or Profile depend directly on all of the other content requested. So, when you have a project that has close to no other metadata component types other than the Permission Set, the retrieved Permission Set will likely have close to nothing in it. When you have a project with all metadata component types in it, you will likely have a larger Permission Set file.

From the common migration issues documentation:

The contents of a Permission Set or Profile returned by Metadata API depends on the content requested in the RetrieveRequest message. For example, profiles only include field-level security for fields included in custom objects returned in the same RetrieveRequest as the profiles.

There are more examples in the Profile documentation in the Metadata API docs as well and here is a good article on the Force.com IDE and Metadata.

Related Solutions

[SalesForce] Customizing visualforce permission error message

I'm not sure how to change that message for your particular page, so maybe someone else will come along with a solution for that.

I know that you mentioned not being able to create new page layouts, but do you have access to the existing page layout where you could remove the Visualforce section on the page layout? If so, could you remove it and then add your own that conditionally includes it:

<apex:page standardController="YourObject" extensions="YourExtensionThatChecksForLicense">
 <apex:include pageName="theThirdPartyVfPage" rendered="{!hasLicense}"/>
</apex:page>

[SalesForce] Are profile and permission set metadata files getting all project objectPermissions

this is not a solution, just a comment, as I do not have enough reputation to post comments.

When you retrieve profiles, does you package.xml also include relevant objects? The reason for this question is that retrieving Profiles only works properly when you specify objects and fields in the same request. i.e. if you retrieve objects first, and then profiles then you will not get full profile information. See "fields" section here: http://www.salesforce.com/us/developer/docs/api_meta/Content/meta_profile.htm#heading_2_

The content of a profile returned by Metadata API depends on the content requested in the RetrieveRequest message. For example, profiles only include field-level security for fields included in custom objects returned in the same RetrieveRequest as the profiles

Best Answer

Related Solutions

[SalesForce] Customizing visualforce permission error message

[SalesForce] Are profile and permission set metadata files getting all project objectPermissions

Related Topic