Code

Security Bug Fixes#7215

Code

Merged

npsp-reedestockton merged 37 commits intofeature/248SalesforceFoundation/NPSP:feature/248from feature/248__security-bug-fixesSalesforceFoundation/NPSP:feature/248__security-bug-fixesCopy head branch name to clipboardNov 16, 2023

+563-68

Commits

Commits on Nov 9, 2023

• Add CRUD/FLS checks

  npsp-reedestockton

  committed
  35b0382

  Copy full SHA for 35b0382

• Exclude 'npe03' and '__r' from queryFields

  npsp-reedestockton

  committed
  93e7521

  Copy full SHA for 93e7521

• Fix logic for applying UTIL_Namespace.StrTokenNSPrefix()

  npsp-reedestockton

  committed
  c77c878

  Copy full SHA for c77c878

• Change exception class to UTIL_Permissions.InsufficientPermissionException

  npsp-reedestockton

  committed
  febbb83

  Copy full SHA for febbb83

• Add update check for Opportunity Name

  npsp-reedestockton

  committed
  b663013

  Copy full SHA for b663013

• Change exception class to UTIL_Permissions.InsufficientPermissionException

  npsp-reedestockton

  committed
  a51cd13

  Copy full SHA for a51cd13

• Refactor try/catch block

  npsp-reedestockton

  committed
  0d64cfd

  Copy full SHA for 0d64cfd

• Check security on Data Import and Form Template

  npsp-reedestockton

  committed
  4c007ee

  Copy full SHA for 4c007ee

• Fix broken test and aurahandled message

  npsp-reedestockton

  committed
  a76dee9

  Copy full SHA for a76dee9

• Refactor try/catch logic

  npsp-reedestockton

  committed
  35e9e25

  Copy full SHA for 35e9e25

• Remove AuraEnabled notation from deleteFormTemplates()

  npsp-reedestockton

  committed
  a2c516a

  Copy full SHA for a2c516a

• Refactor/Move code

  npsp-reedestockton

  committed
  bd46c61

  Copy full SHA for bd46c61

• Refactor canUpsertDataImport()

  npsp-reedestockton

  committed
  6f7f36a

  Copy full SHA for 6f7f36a

• Refactor and add comments.

  npsp-reedestockton

  committed
  7a57eaa

  Copy full SHA for 7a57eaa

• Add FLS and refactor.

  npsp-reedestockton

  committed
  8182dd7

  Copy full SHA for 8182dd7

• Add FLS and refactor.

  npsp-reedestockton

  committed
  19675e5

  Copy full SHA for 19675e5

• Add FLS for CampaignMember.Status

  npsp-reedestockton

  committed
  f422dd2

  Copy full SHA for f422dd2

• Add FLS for queries and check CRUD for deletes

  npsp-reedestockton

  committed
  f98e9d7

  Copy full SHA for f98e9d7

• Check isMergeable and strip inaccessible fields from search results.

  npsp-reedestockton

  committed
  a6b6eca

  Copy full SHA for a6b6eca

• Add Opportunity fields to required and call check hasFeatureAccess

  npsp-reedestockton

  committed
  0dc6a96

  Copy full SHA for 0dc6a96

• Fix unit tests / set hasFeatureAccess true

  npsp-reedestockton

  committed
  ea2a4b9

  Copy full SHA for ea2a4b9

• Add OCR read, modify and delete to hasAccess. Check hasAccess in save().

  npsp-reedestockton

  committed
  96a2464

  Copy full SHA for 96a2464

Commits on Nov 10, 2023

• Add hasAccess check to controller and page

  npsp-reedestockton

  committed
  454e70c

  Copy full SHA for 454e70c

• Revert unnecessary changes...

  npsp-reedestockton

  committed
  82d6a0c

  Copy full SHA for 82d6a0c

• Fix access checks

  npsp-reedestockton

  committed
  626ebad

  Copy full SHA for 626ebad

• Fix access checks

  npsp-reedestockton

  committed
  917b6a9

  Copy full SHA for 917b6a9

• Prevent page access without read access to basic lead fields

  npsp-reedestockton

  committed
  c1e144d

  Copy full SHA for c1e144d

• Fix failing HH_ManageHH_Test.testNewHHObject()

  npsp-reedestockton

  committed
  636dc39

  Copy full SHA for 636dc39

• Check for AuraHandledErrorMessage in shouldNotReturnPauseDataWhenUserDoesNotHaveCreateAndEditPermissions()

  npsp-reedestockton

  committed
  8c4f932

  Copy full SHA for 8c4f932

• Merge 8c4f932 into feature/248__security-bug-fixes__security-bug-fixes-2

  salesforce-org-metaci[bot]

  authored
  81f86c3

  Copy full SHA for 81f86c3

• Check for standard Level__c field creation permission

  npsp-reedestockton

  committed
  a3b24f2

  Copy full SHA for a3b24f2

Commits on Nov 15, 2023

• Remove fields to check from hasFieldReadAccess()

  npsp-reedestockton

  committed
  6e52c17

  Copy full SHA for 6e52c17

• Remove Undeliverable__c from fields to check for Address read access

  npsp-reedestockton

  committed
  cb4557e

  Copy full SHA for cb4557e

• Add permissions check for CampaignMemberStatus

  npsp-reedestockton

  committed
  e122060

  Copy full SHA for e122060

• Remove @testvisible annotation

  npsp-reedestockton

  committed
  1a05e57

  Copy full SHA for 1a05e57

• Fix copy/paste error resulting in bad build

  npsp-reedestockton

  committed
  2245fbf

  Copy full SHA for 2245fbf

Commits on Nov 16, 2023

• Merge pull request #7216 from SalesforceFoundation/feature/248__security-bug-fixes__security-bug-fixes-2

  Show description for d8ff2e9
  npsp-reedestockton

  authored
  d8ff2e9

  Copy full SHA for d8ff2e9