Rationale

There are cases where  developers use Visualforce or Lightning to display data derived from an SObject field in an indirect or processed form. In such scenarios CRUD and  FLS should be manually enforced.  

Scope

  • Visualforce pages and components
  • Lightning components
  • Apex classes

See also

Did this answer your question?