Summary

In this chapter, we focused on the many ways in which we can ensure that we are maintaining the security of our application via our Apex code.

Trust has always been Salesforce’s number-one value. As an organization handling hundreds of billions of daily transactions with hundreds of thousands of customers storing their data, they have to make sure that you can be confident that they will not put your data at risk. As a part of that agreement, however, we as developers have to ensure that we are not accidentally exposing data or allowing users to access more data than they should be able to.

We started the chapter by looking at how sharing and permissions are managed on Salesforce before reviewing how we can enforce them within our Apex code, then looking at how we can create and manage custom sharing setups using Apex managed sharing.

Following this, we moved to the other side of the Salesforce access-control model: object and field permissions. We saw how we...