Apex Permissions

The Apex Permissions tool in Crudspace.io allows administrators to manage access to Apex classes within Salesforce. This feature simplifies the process of controlling which profiles and permission sets can execute specific Apex classes.

Overview

Apex class security is an important aspect of Salesforce security that determines which users can execute Apex code. The Apex Permissions tool provides:

• A unified view of Apex class permissions across profiles and permission sets
• Bulk editing capabilities for Apex permissions
• Easy assignment of multiple Apex classes to profiles or permission sets
• Advanced filtering options

Accessing Apex Permissions

To access the Apex Permissions tool:

1. Log in to Crudspace.io
2. From the left sidebar, click on "Apex Perms"

Interface Components

Filter Panel

The left side contains filters to help you narrow down the Apex permissions:

• Profiles Selector: Choose which profiles to include
• Permission Sets Selector: Choose which permission sets to include
• Apex Classes Selector: Filter by specific Apex classes

Permissions Table

The main area displays a table of Apex class permissions with columns:

• Apex Class Name: The name of the Apex class
• Parent Profile/Permission Set: The profile or permission set that contains these permissions
• Enabled: Whether access to the Apex class is granted

Action Buttons

• New: Create new Apex class permissions
• Save: Save changes to modified permissions
• Delete: Remove selected permissions
• Refresh: Reload the current view

Working with Apex Permissions

Viewing Apex Permissions

1. Select profiles and/or permission sets from the filter panel
2. Optionally, select specific Apex classes to filter the results
3. The table will display all matching Apex class permissions

Modifying Apex Permissions

1. Select the rows you want to modify in the table
2. Click the checkboxes in the Enabled column to grant or revoke access
3. Click "Save" to apply your changes to Salesforce

Creating New Apex Permissions

1. Click the "New" button
2. In the "Create Apex Permissions" dialog:
   • Select the target profiles or permission sets
   • Select the Apex classes to add permissions for
   • Enable access as needed
3. Click "Create" to add the new permissions

Deleting Apex Permissions

1. Select the permissions you want to remove in the table
2. Click "Delete"
3. Confirm the deletion in the dialog
4. The permissions will be removed from Salesforce

Bulk Operations

The Apex Permissions tool supports bulk operations to efficiently manage permissions:

Bulk Assign

1. Click "New" to open the creation dialog
2. Select multiple profiles or permission sets
3. Select multiple Apex classes
4. Set the desired access level
5. Click "Create" to apply the permissions in bulk

Bulk Modify

1. Use the column headers to select all rows
2. Or use the checkboxes to select specific rows
3. Modify the Enabled status for all selected rows at once
4. Click "Save" to apply all changes

Advanced Features

Search and Filter

Use the search functionality to quickly find specific Apex classes:

1. Enter a search term in the Apex Class filter
2. The list will filter to show only matching classes

Row Limit Control

Manage the number of rows displayed to improve performance:

1. Use the row limit dropdown to select how many rows to display
2. Choose between 100, 500, 1000, or All rows

Security Best Practices

• Principle of Least Privilege: Only grant access to Apex classes that users actually need
• Regular Audits: Periodically review Apex permissions to ensure they align with your security requirements
• Documentation: Maintain documentation of which profiles and permission sets have access to critical Apex classes
• Testing: After making permission changes, test to ensure users can still perform necessary functions

Related Documentation

• Visualforce Permissions
• Custom Permissions
• Permission Sets & Groups