• Reena Panimayam 5
  • NEWBIE
  • 0 Points
  • Member since 2020

  • Chatter
    Feed
  • 0
    Best Answers
  • 0
    Likes Received
  • 0
    Likes Given
  • 1
    Questions
  • 0
    Replies
Hi All,

As per the recent Salesforce's "Guest User Security Policy", Salesforce recommends to enable the 'Secure Guest User Record Access', 'Assign Records Created by Guest Users to a Default Owner', 'Secure Guest Users' Org-Wide Defaults and Sharing Model', 'Remove View All Users Permission from Guest User Profiles' 

We have few Guest User profiles in our Org, to which we provide the Edit/Modify All/View All accesses. As per the Salesforce Spring20/Summer20 Release notes, the Guest Users are not allowed to have the edit access anymore, they no longer going to be the default owner of the records they create, they no longer will be assigned to a Public Group and no longer have Object Permissions.

In this case, as its going to affect certain functionalities in our Org, we identified an alternate solution to provide access to the Guest Users, which is to declare our related 'Apex Classes' as 'Without Sharing' to run those classes in system mode.

My question here is, is this a best practice that can be opted as an alternate to provide edit access to our Guest Users? Or is there any other option for us to continue to provide the Guest Users the update access?