A Visualforce controller has a requirement to be written with "Without Sharing" at the top level;however, certain methods within the page still need to enforce the user permissions for creating records and accessing certain fields. Which two methods below would be used to enforce this requirements?
Choose 2 answers.
Universal Containers has a strict security model enforced through object, field, and row-based security mechanisms. The Architect would like to ensure the security model is being thoroughly tested using Apex automatedtests. Which three considerations should be made when using the runAs() method to design Apex until tests?
Universal Containers (UC) uses a custom Visualforce page to displayshipment tracking information (custom object, private OWD) to field manager and agents. The IT team wants to make sure that users have access to only the information that is allowed.
Which Apex method must be used to make sure only allowed fields are shownto the users?
Universal Containers is implementing a community of High-Volume Community users. Community users should be able to see records associated to their Account or Contact record. The Architect is planning to use a Sharing Set toprovide access to the records. When setting up the Sharing Set, certain objects are not available in the list of Available Objects. Which two reasons explain why an object is excluded from the list of Available Objects in a Sharing Set?
Besides their own team accounts, sales managers at Universal Containers need to have
READ access to all accounts of the same segment in other countries. Role hierarchy was
implemented accordingly (based on countries), but a sales manager in the US is complaining
that he cannot view account records of the same segment in Canada. What should be done
to grant access in a proper way?
Universal Containers has created a ReimbursementCustom Object to capture requests for reimbursement of expenses related to office supplies. The Reimbursement requests are sometimes sensitive and the Team Leads should not have access to the Reimbursement records submitted by the Users in the Call CenterAgent role. The Director of Support will require access to all Reimbursement records. The role hierarchy is set as follows: Call Center Agent role reports to Team Lead role, which Reports to the Director of Support. Which steps would the Architect take toensure proper sharing in this Role Hierarchy structure assuming Private Sharing Setting for the Reimbursement Object?