Object and field level security
Ensuring that object and field level security configuration is respected in your custom UIs is a key part of your responsibility to provide your customers with a secure solution. The standard UIs do this automatically for you, but it requires further consideration for custom UIs. In this section, we will explore how to do this for both LWC and Visualforce pages. Lightning Aura Components has more limited support for it.
The following custom UIs illustrate how object and field level security are applied (or not) depending on the binding approach and/or components used. This will help you understand when you need to add additional code or just rely on the standard components.
In the use case used in the next two sections, two users are used; one has full access, and the other has been given the following permissions via their profile:
- Read-only access to the
Status__cfield - No access at all to the
FastestLapBy__cfield