Salesforce Winter '20 Release: Critical Updates

Salesforce has announced two critical updates to be released at the beginning of 2020. The administrator of the CT CPG package must perform additional configuration for the current profiles before the update is released, otherwise, the CT CPG package proper functioning will be impossible.

Announced critical updates

Require Customize Application permission for direct read access to custom settings

Currently, users without Customize Application permission can read custom settings using different APIs that are provided by Salesforce. Following the “secure by default” approach, read access for users without Customize Application permission will be revoked with this update.

System Administrator needs to perform the actions that are described in this article to allow access to custom settings to non-admin CT CPG users (via profiles or permission sets).

3 January 2020

Require Customize Application permission for direct read access to custom metadata types

Currently, users without Customize Application permission can read unprotected custom metadata types using different APIs that are provided by Salesforce. Following the “secure by default” approach, read access for users without Customize Application permission will be revoked with this update.

System Administrator needs to perform the actions that are described in this article to explicitly grant access to custom metadata types to non-admin CT CPG users (via profiles or permission sets).

17 February 2020

You can allow direct read access to Custom Settings and Custom Metadata Type by editing:

  • Profile settings

  • Permission Set settings

For the first option, you will need to configure each profile separately, or you can edit a permission set and assign it to all users you want to grant read access to.

After updating the permissions configuration, launch full synchronization on devices with installed CT Mobile to include the changes.

Impacted functionality

The following features will be blocked:

  • Targeting functionality

  • Activity Detailing

  • Joint Visits

Recommended actions

To avoid possible issues, we recommend you to perform a test configuration for your package before the automatic updates take place. The update can be manually activated and rolled back after testing.

Follow the instructions below to set up desired profiles and check proper package functioning.

  • Use the sandbox environment to perform testing.

  • If you encounter any issues, please, address them to Salesforce support immediately.

Grant permissions to Custom Settings

Via Profile settings

To set up permissions for direct read access to custom settings for a profile:

  1. Go to Setup (1) → Users → Profiles (2).

  2. Click Edit (3) next to a profile you want to configure.

    CU_profiles

  3. Go to the Enabled Custom Setting Definitions Access section.

  4. Click Edit.

  5. Select the following Available Custom Setting Definitions from the list:

    1. All package custom setting definitions with the CT CPG prefix.

    2. All project-specific custom setting definitions (any additional non-package custom settings added by the company’s admin).

    3. The _Digital Signature Settings _custom setting definition (if the Documents Module is used on your project).

      Enable Custom Setting Definitions Access

  6. Click Add

  7. Click Save.

Via Permission Set Settings

To set up permissions for direct read access to custom settings for a permission set:

  1. Go to Setup (1) → Users → Permission Sets (2).

  2. Select a permission set which you want to configure (3) or create a new permission set.

    CU permission sets

  3. On the Permission Set Overview page that opens, scroll to the Apps section, and click Custom Settings Definitions.

    66361701

  4. On the next page, click Edit next to the Custom Settings Definitions.

  5. Select the following Available Custom Settings Definitions from the list:

    1. All package custom setting definitions with the _CT CPG _prefix.

    2. All project-specific custom setting definitions (any additional non-package custom settings added by the company’s admin).

    3. The _Digital Signature Settings _custom setting definition (if the Documents Module is used on your project).

      Enable Custom Setting Definitions Access permission set

  6. Click Add.

  7. Click Save.

The selected setting will be applied.

Assign the newly configured permission set to the required users.

Grant permission to Custom Metadata Type

Via Profile settings

To set up permission for direct read access to custom metadata types for a profile:

  1. Go to Setup (1) → Users → Profiles (2).

  2. In the list of profiles, select a profile you wish to configure (3).

    CU_profiles

  3. Go to the Enable Custom Metadata Type Access section.

  4. Click Edit.

  5. Select the following Available Custom Metadata Types:

    1. Package metadata types with the CT CPG prefix: CT CPG Solution.CTCPG.ActivitySync.

    2. All project-specific metadata types (any additional non-package metadata types).

      Enable Custom Metadata Type Access

  6. Click Add

  7. Click Save.

Via Permission Set settings

To set up permission for direct read access to custom metadata types for a permission set:

  1. Go to Setup (1) → Users → Permission Sets (2).

  2. Select a permission set (3) which you want to configure or create a new permission set.

    CU permission sets

  3. On the Permission Set Overview page that opens, scroll to the Apps section, and click Custom Metadata Types.

    Custom Metadata Types

  4. On the next page, click Edit next to the Custom Metadata Types.

  5. Select the following Available Custom Metadata Types:

    1. Package metadata types with the CT CPG prefix: CT CPG Solution.CTCPG.ActivitySync.

    2. All project-specific metadata types (any additional non-package metadata types).

      Enable Custom Metadata Type Access permission set

  6. Click Add.

  7. Click Save.

Selected Custom Metadata Type will be enabled Assign the newly configured permission set to the required users.

``