+ Start a Discussion
HaroldHHaroldH 

Security Q1: Create Document from Salesforce UI but not via API

This looks like a security-related issue. I can create a Document, in a public folder, when logged into the Salesforce.com UI as a user with "Standard User" permissions. However, using the Sforce 3.0 API, I get this error message: "insufficient access rights on cross-reference id".

Now, when logged in as a user with "System Administrator" permissions, I can create a Document just as well with the API as the UI. (More precisely, as long as Profile/Administrative Permissions/Modify All Data is checked On, this user can create a new document via the API. Otherwise, the access rights error occurs.)

Note that the fields I'm including in the initial create() call are:

- FolderId
- Name
- Body
- AuthorId

Any clues?

Message Edited by HaroldH on 06-28-2004 03:16 PM

DevAngelDevAngel

Hi HaroldH,

We have noted this as a bug and we are working on a patch right now.  We hope to have the patch published prior to the Summer '04 release.

Cheers