Salesforce records data is organized by Object type. The
Salesforce connector starting point for retrieving Objects records data is the
isSearchable attribute of the related Salesforce
Object. This value must be set to true for
Objects data to be crawled by the Salesforce connector.
Unless configured to retrieve a limited set of Salesforce
Objects, which
the connector can be configured to do in the connector seed settings (described later in this
documentation), the Salesforce connector will retrieve all
Objects data that
has the attribute
isSearchable set to
true.
Important: The Salesforce connector checks that the Objects attribute
value isSearchable is true to initially determine if
those Objects are to be crawled. This initial starting point prevents the
Salesforce connector from crawling the full array of all Objects data that
may exist in your Salesforce application. Conversely, Objects in your
Salesforce application that have the isSearchable attribute set to
false, will not be included in the Salesforce connector crawl.
After the crawl, the default permission settings of the returned searchable results are
determined by their Organization Wide Default settings. When the
Organization Wide Default for an Object type is
Public, restrictions on who may view an Object are
based on each user's Profile and Permission Sets.
When the Organization Wide Default for a Salesforce
Object type is configured as Private, record-level
sharing with Users, Roles and
Groups is supported for certain Object types with
certain limitations. Consult your Salesforce security model resources for more information.
Important: Some Salesforce Objects can be configured to use
Grant Access Using Hierarchies. This feature is not supported by the
Salesforce connector for Custom Objects. In such cases, the Salesforce
connector will only use the Objects explicit, non-inherited, permissions to
determine the rights associated with those Objects.
Important: Some Salesforce Object types inherit their permissions
from another Object designated as the parent of that
Object. In some cases, the Salesforce connector does not support record
sharing settings for these child Objects, but instead restricts access to the
record owner.
Note: Security based on APEX components is not supported by the Salesforce connector. Field-level
security on records is supported by the connector, except when that security is dynamically based on
the value of the field.