function readOnly(count){ }
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
+ Start a Discussion
aezellaezell 

Permissions and Web Services

If I create a web service connection with a user's login information and then request the fields on a particular object, say Contacts. Would that describe() call show me only the fields of that object to which the logged in user has access?

I want to be sure that when I show the user a list of fields available, they see only fields to which they have access.

Again, this all being done through the web service. This is not Apex Code running on SF.
werewolfwerewolf
Yes, the describe call will only show fields that a user can see; so if you make, say, Account.AccountNumber invisible to a user using Field Level Security, and that user logs in via the web services API, it will appear to him as if the AccountNumber field doesn't even exist.  It won't show up in the describe call, and if he tries to query it it will complain that the field does not exist.  The same is true of custom fields.