Skip to content

Give the LoggerEndUser permission set (minimal) CRUD access #923

@jongpie

Description

@jongpie

@arbokrad asked on SFXD about giving non-admins the ability to make some edits to logging data:

nebula question for you - if we want to have some users able to modify logs (like, mark them resolved) but not manage any of the other nebula settings... is there a good fit from the existing permissions? or should we be looking at using LoggerLogViewer and a new permset to grant write access to the Log__c object and fields?

we have a admin-esque user going through and resolving things that come up, but that person should definitely not be able to change log levels or retention duration or anything of those sorts

Currently, the LoggerEndUser permission set only has read access to objects/fields - but it was originally intended to handle situations like above, where users can make some minimal edits to fields, manage tags (by creating/deleting LogEntryTag__c records), etc. - but at some point over the years, the permission set changed to only having read access 😢

To handle these situations, the LoggerEndUser should be updated to have CRUD access in a few places:

  • Edit access on Log__c object + certain fields, like Log__c.Comments__c
  • Created/edit/delete access on LogEntryTag__c
  • Maaaaaybe create access on LoggerTag__c and LoggerScenario__c too - I need to think about this one some more before deciding

Metadata

Metadata

Assignees

Labels

Layer: ConfigurationItems related to the custom hierarchy setting LoggerSettings__c or any included custom metadata typeLayer: Log ManagementItems related to the custom objects & Logger Console appSalesforce Feature: SecurityItems related to the security model (object-level access, field-level security, record sharing)

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions