Platform Developer I Certification Maintenance (Spring ’19) Answers

Platform Developer I Certification Maintenance (Spring ’19) Hands on Code

@RestResource(urlMapping='/secureApexRest')
global with sharing class SecureApexRest {
@HttpGet
global static Contact doGet(){
Id recordId = RestContext.request.params.get('id');
Contact result;
if (recordId == null){
throw new FunctionalException('Id parameter is required');
}
try{
List<Contact> results = [SELECT id, Name, Secret_Key__c FROM Contact WHERE Id = :recordId WITH SECURITY_ENFORCED];
if (!results.isEmpty()) {
result = results[0];
}
}catch(QueryException ex){
//do something
}
return result;
}
public class FunctionalException extends Exception{}
public class SecurityException extends Exception{}
}

@RestResource(urlMapping='/secureApexRest')

global with sharing class SecureApexRest {

@HttpGet

global static Contact doGet(){

Id recordId = RestContext.request.params.get('id');

Contact result;

if (recordId == null){

throw new FunctionalException('Id parameter is required');

}

try{

List<Contact> results = [SELECT id, Name, Secret_Key__c FROM Contact WHERE Id = :recordId WITH SECURITY_ENFORCED];

if (!results.isEmpty()) {

result = results[0];

}

}catch(QueryException ex){

//do something

}

return result;

}

public class FunctionalException extends Exception{}

public class SecurityException extends Exception{}

}

Continue reading→

Salesforce Sharing and Visibility Designer Series Part 14

by Yogesh Mishra | No Comments

This entry is part 15 of 17 in the series Sharing and Visibility Designer Study Guide

CRUD and FLS Enforcement Manual CRUD and FLS Enforcement in Apex Controllers There are often cases where developers use VisualForce to display data derived from an SObject field in an indirect or processed form. For example

<apex:page controller="RandomContactController">

  <apex:outputText value="{!getRandomName}" />

</apex:page>

public with sharing class RandomContactController {

    public String getGetRandomName() {

        // Check if the user has read access on the Contact.Name field

        if (!Schema.sObjectType.Contact.fields.Name.isAccessible()){

          return '';

        }       

        Contact [] myList = [SELECT Name FROM Contact LIMIT 1000];

        // Pick a list entry at random

        Integer index = Math.mod(Math.abs(Crypto.getRandomInteger()),myList.size());

        Contact selected = myList.get(index);

        return selected.Name;

    }

}

<apex:page controller="RandomContactController">

<apex:outputText value="{!getRandomName}" />

</apex:page>

public with sharing class RandomContactController {

public String getGetRandomName() {

// Check if the user has read access on the Contact.Name field

if (!Schema.sObjectType.Contact.fields.Name.isAccessible()){

return '';

}

Contact [] myList = [SELECT Name FROM Contact LIMIT 1000];

// Pick a list entry at random

Integer index = Math.mod(Math.abs(Crypto.getRandomInteger()),myList.size());

Contact selected = myList.get(index);

return selected.Name;

}

FLS and CURD can be enforced on VF page. But Apex controllers is preferred for scalability and […]

Continue reading→