Salesforce’s Spring ‘20 Release: Changes regarding guest users starting March 1, 2020

  • 2
  • Announcement
  • Updated 1 day ago
Issue

In the Spring ‘20 Salesforce release, Salesforce is modifying what guest users are able to do using out of the box Salesforce in order to secure communities and force.com sites. As noted in this documentation and further explained in this documentation, although the changes are part of the Spring ‘20 release, they will not be automatically enabled in orgs until March 1st. 

Who Will be Affected by This:

Any clients who utilize guest users in your Salesforce org may be affected by this depending on what your guest users do.

How Does this Affect My Use of Skuid and What is Skuid Doing About It? 

Salesforce’s change also impacts Skuid’s File Upload component for site guest users. The Skuid Product Engineering team is working on a product change to restore the ability for Guest Users to use Skuid’s File Upload component to upload attachments to records. This change will be available in 11.2.30 and 12.2.14. 

What Do I Need to Do? 

As soon as possible, any clients who utilize guest users in your Salesforce org need to thoroughly test all functionality that your guest users can currently do in your prod org against what they can do in a sandbox with the ”Secure guest user record access” enabled

1. If you are using Skuid’s File Upload component for site guest users: 

  1. Upgrade a sandbox to either 11.2.29 or 12.2.13 per these instructions. This way, you will be prepared to move quickly when the upcoming Skuid release that contains the fix is available (11.2.30 or 12.2.14) 

  2. Thoroughly test that version to ensure there are no adverse changes to any of your mission critical functionality

  3. Upgrade that sandbox to 11.2.30 or 12.2.14 when it is available and test again

  4. Upgrade your production org to 11.2.30 or 12.2.14 when everything checks out in your sandbox. 

Please note that even on Skuid version 11.2.30 or 12.2.14, you will still need to use Salesforce’s new Guest User Sharing Rules to grant record level access to the records your Guest Users should be able to access. 

For example, if your Guest Users currently use Skuid to create a record and then upload a file as an attachment to that record, you will need to create one or more Guest User Sharing Rules to share these newly-created records to your site’s Guest User. If you do not create the requisite sharing rules, you will still be unable to use Skuid’s File Upload component to upload attachments to those records, even with 11.2.30 or 12.2.14 installed.

2. If your guest users need to access records they have created, such as allowing Guest Users to create a record and then additional “detail” records related to that first record, you have several options: 

  1. Try to achieve the record access for your site guest user using Site Guest User Sharing Rules

  2. Modify your Skuid Page to either 

    1. Invoke Apex that runs an update in a “without sharing” context to perform the record linkages. 

    2. Run a Flow that runs in system context. 

    3. For more details on a or b, please see this article on how Salesforce recommends that customers write Apex to work outside of the security model you have configured for your Org.

  3. If you continue to have problems either:

    1. Open a case with Salesforce detailing your use case and how it works currently in winter ’20 and what you need it to continue to do. Our understanding is that Salesforce has a task force to help clients work through any issues related to this release.

    2. Sign up for Salesforce’s office hours to ask questions of the experts live. 


Other Salesforce Resources That May be Helpful

Here are also some resources Salesforce provided: 

Salesforce Winter ‘20 release notes also include changes regarding guest users: 

Photo of Karen Waldschmitt

Karen Waldschmitt, Official Rep

  • 9,292 Points 5k badge 2x thumb

Posted 2 months ago

  • 2
Photo of Karen Waldschmitt

Karen Waldschmitt, Official Rep

  • 9,292 Points 5k badge 2x thumb
Official Response
Quick update: 11.2.30 and 12.2.14 are both now live from the Skuid releases page
Photo of Karen Waldschmitt

Karen Waldschmitt, Official Rep

  • 9,292 Points 5k badge 2x thumb
Official Response
One addition to the previously stated "What Do I Need To Do:" 

If none of the above resolved the issue for you, the final option is for you to request that Salesforce delay auto activating the guest user change in your org until summer ‘20 to give yourself more time to get situated as explained in this documentation