Restrict Access to @AuraEnabled Apex Methods for Authenticated Users Based on User Profile (Security Alert)

This security alert is related to a critical update that gives you more control over which authenticated users can access Apex classes with @AuraEnabled methods in Aura and Lightning web components.

Where: This change applies to Aura and Lightning web components in Lightning Experience, Salesforce Classic, Lightning communities, and all versions of the Salesforce app.

Why: When the associated critical update is activated, an authenticated user can access an @AuraEnabled Apex method only when the user’s profile allows access to the Apex class. This critical update enforces user profile restrictions for Apex classes used by Aura and Lightning web components.

How: To view the security alert and see recommendations for your org, enter Security Alerts in the Quick Find box in Setup and select Security Alerts.