Topic
Salesforce Guest User Access to Skuid pages after Winter ‘21.
Resolution
Create page sharing rules to enable guest user access to Skuid pages and Salesforce objects after Winter ‘21 security updates.
Problem Details
Salesforce’s Winter ‘21 release has enacted changes to what data guest users can access on Force.com sites. Skuid pages that were previously available to Guest Users will now display “You’ve been INKED” errors:
Resolution Process
Enter sharing rules Sharing rules will enable your guest users to access the pages and data they could before the Winter ‘21 update while also keeping your Force.com site secure. I needed to create a new sharing rule for the Skuid page object and any objects that have any data accessed on the Skuid page. In this case I had a Skuid page called Events whose models are connected to a custom Salesforce object called happening.
-
Navigate to the Sharing Settings page.
Within the Salesforce setup sidebar, navigate to Administer > Security Controls > Sharing Settings.Lightning: Within Setup, navigate to Security -->Sharing Settings.he Page object from the Manage sharing settings for
- Dropdown.
- Under the Sharing Rules section create a new sharing rule.
- Create a sharing rule similar to the following.
Label, Rule Name, and Description
- Filled out as needed.
Rule Type
- Guest user access, based on criteria.
Criteria
- Enter one criteria rule as follows.
Field
- Page Name.
Operator
- Equals.
Value: The Skuid page you must share, in this example Events
Share with: Select the Site Guest User for the public site you’re adjusting for. If you have only one site, like this example’s FabFridayInfo
- then select that. If you have multiple sites, be sure to select the correct one.
Access Level: Read Only, do not change
- Save the sharing rule. Once the rule was done processing, I refreshed the force.com site. I could now see the Skuid page however, there was no data being loaded.
I also needed to create a sharing rule for the objects on the page using the same steps as above, in this case the custom object called happening.
On the happening object there is a picklist field named Type:
- which indicates whether an event is internal or public. I only wanted the public events to show on the public facing page so:
Field
- Type.
Operator
- Equals.
Value
- Public.
I saved this new sharing rule and refreshed the public site to see that guest user access has been restored:
Outcome
Creating sharing rules on both the page and the object enables guest users on public-facing Force.com sites to view the Skuid pages and Salesforce data.
Additional Information
Fixing the issue can be relatively quick as long as you have an understanding of your pages and the data they are accessing. This will prepare you for Spring ‘21 when theses changes will be enforced in all organizations.
Salesforces release notes regarding: Guest User Access changes in Winter ‘21:
Skuid Community announcement:
Official Skuid Documentation: https://docs.skuid.com/latest/en/skuid/deploy/salesforce/guest-user/
Get help with an issue
- Ask in the Skuid question forum.
- If you have a support entitlement, ask your question in Nintex Customer Central.