Modify All Data, View All Data, Edit, and Delete Permissions on Guest User Profiles in Orgs Created Before Summer ’20

In orgs created before the Summer ’20 release, we're removing the View All Data, Modify All Data, and delete permissions on custom and standard objects for guest users, but only if they were never enabled on the guest profile or permission sets for guest users. In orgs created before the Summer ’20 release, guest user profiles retain guest edit permissions on all custom objects and the following standard objects: Order, Contract, and Survey Response. Guest users only had edit permissions on the three standard objects mentioned, and this behavior has not changed. If your org was created before the Summer ’20 release, and you have View All Data, Modify All Data, edit, or delete permissions on any object for a guest user, you’re notified by a Security Alert to make the necessary changes to your org.

Where: This change applies to all orgs with guest user profiles for communities, Site.com sites, and Salesforce Sites.

Important

Important

While we’re not removing the edit permission for guest users on custom objects and Order, Contract, and Survey Response yet, we’re removing it with the Winter ‘21 release. Test your configuration by removing the edit permission on all objects for guest users to see how your implementation is affected.