Opt Out of Enforcing Guest User Object Permission Changes (Previously Released Update)
Where: This update applies to all Salesforce Sites (formerly Force.com Sites), Site.com sites, and communities that have guest user access enabled.
- Edit, delete, Modify All Data, and View All Data for custom objects.
- Edit, delete, Modify All Data, and View All Data for the following standard objects:
Order, Contract, Survey Response, ProfileSkillUser, and ProfileSkillEndorsement.
These permissions are scheduled to be turned off for custom objects and the previous standard objects with the rollout of the Winter ’21 release. But you can still enable them to meet your business needs. After your org updates with the Winter ’21 release, you can no longer activate this update.
If you opt out, your opt-out period is only valid for the Winter ’21 release. With the Spring ’21 release, these permissions are permanently removed for guest users, and can no longer be enabled.
Salesforce strongly recommends that you closely check your org’s guest user profiles, permission sets, and permission set groups to ensure that the settings aren’t enabled for any standard or custom objects. If the settings are enabled, disable them, and test your org’s configuration before the Winter ’21 release. Salesforce understands that some customers require more time to comply with removing the permissions from guest user profiles. This update gives you ample time to get ready.