Do we need to check FLS for Record Id field in apex?

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP





.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty margin-bottom:0;







up vote
1
down vote

favorite












We are submitting our application for Security review so we have to check FLS/CURD so we have a query like below.



Account ac = [SELECT id, Name From Account limit 1];


so do we need to check isAccessible() for Id field here? I know we have to check for Name field but not sure do we really need to check same for Id field?






apex security-review







share|improve this question





























    up vote
    1
    down vote

    favorite












    We are submitting our application for Security review so we have to check FLS/CURD so we have a query like below.



    Account ac = [SELECT id, Name From Account limit 1];


    so do we need to check isAccessible() for Id field here? I know we have to check for Name field but not sure do we really need to check same for Id field?






    apex security-review







    share|improve this question

























      up vote
      1
      down vote

      favorite









      up vote
      1
      down vote

      favorite











      We are submitting our application for Security review so we have to check FLS/CURD so we have a query like below.



      Account ac = [SELECT id, Name From Account limit 1];


      so do we need to check isAccessible() for Id field here? I know we have to check for Name field but not sure do we really need to check same for Id field?






      apex security-review







      share|improve this question















      We are submitting our application for Security review so we have to check FLS/CURD so we have a query like below.



      Account ac = [SELECT id, Name From Account limit 1];


      so do we need to check isAccessible() for Id field here? I know we have to check for Name field but not sure do we really need to check same for Id field?






      apex security-review




      apex security-review






      share|improve this question















      share|improve this question













      share|improve this question




      share|improve this question








      edited 2 hours ago









      Oleksandr Berehovskiy

      6,50611532




      6,50611532










      asked 2 hours ago









      Ravikant Kedia

      6561411




      6561411




















          2 Answers
          2






          active

          oldest

          votes

















          up vote
          2
          down vote













          Let's do an interesting thing here:



          Run below code in the developer console:



          List<Account> acc = [Select name from Account];
          System.debug(acc[0].id);


          You will see that debug prints the Id of the account even when we didn't retrieve it.



          Id field is generally included in the soql implicitly.



          So i don't think it anyhow matters to check permission on ID field, It is not required and would only add the ambiguity.



          Rather you should first check access on object itself then on it's fields.






          share|improve this answer



























            up vote
            0
            down vote













            As per my research ID field is not available for set FLS at the profile level. Then it not required to check isAccessible() prior to query. Further, if you have read access to object ID field is accessible by default.





            share




















              Your Answer







              StackExchange.ready(function()
              var channelOptions =
              tags: "".split(" "),
              id: "459"
              ;
              initTagRenderer("".split(" "), "".split(" "), channelOptions);

              StackExchange.using("externalEditor", function()
              // Have to fire editor after snippets, if snippets enabled
              if (StackExchange.settings.snippets.snippetsEnabled)
              StackExchange.using("snippets", function()
              createEditor();
              );

              else
              createEditor();

              );

              function createEditor()
              StackExchange.prepareEditor(
              heartbeatType: 'answer',
              convertImagesToLinks: false,
              noModals: false,
              showLowRepImageUploadWarning: true,
              reputationToPostImages: null,
              bindNavPrevention: true,
              postfix: "",
              onDemand: true,
              discardSelector: ".discard-answer"
              ,immediatelyShowMarkdownHelp:true
              );



              );













               

              draft saved


              draft discarded


















              StackExchange.ready(
              function ()
              StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsalesforce.stackexchange.com%2fquestions%2f234009%2fdo-we-need-to-check-fls-for-record-id-field-in-apex%23new-answer', 'question_page');

              );

              Post as a guest

















              2 Answers
              2






              active

              oldest

              votes








              2 Answers
              2






              active

              oldest

              votes









              active

              oldest

              votes






              active

              oldest

              votes








              up vote
              2
              down vote













              Let's do an interesting thing here:



              Run below code in the developer console:



              List<Account> acc = [Select name from Account];
              System.debug(acc[0].id);


              You will see that debug prints the Id of the account even when we didn't retrieve it.



              Id field is generally included in the soql implicitly.



              So i don't think it anyhow matters to check permission on ID field, It is not required and would only add the ambiguity.



              Rather you should first check access on object itself then on it's fields.






              share|improve this answer
























                up vote
                2
                down vote













                Let's do an interesting thing here:



                Run below code in the developer console:



                List<Account> acc = [Select name from Account];
                System.debug(acc[0].id);


                You will see that debug prints the Id of the account even when we didn't retrieve it.



                Id field is generally included in the soql implicitly.



                So i don't think it anyhow matters to check permission on ID field, It is not required and would only add the ambiguity.



                Rather you should first check access on object itself then on it's fields.






                share|improve this answer






















                  up vote
                  2
                  down vote










                  up vote
                  2
                  down vote









                  Let's do an interesting thing here:



                  Run below code in the developer console:



                  List<Account> acc = [Select name from Account];
                  System.debug(acc[0].id);


                  You will see that debug prints the Id of the account even when we didn't retrieve it.



                  Id field is generally included in the soql implicitly.



                  So i don't think it anyhow matters to check permission on ID field, It is not required and would only add the ambiguity.



                  Rather you should first check access on object itself then on it's fields.






                  share|improve this answer












                  Let's do an interesting thing here:



                  Run below code in the developer console:



                  List<Account> acc = [Select name from Account];
                  System.debug(acc[0].id);


                  You will see that debug prints the Id of the account even when we didn't retrieve it.



                  Id field is generally included in the soql implicitly.



                  So i don't think it anyhow matters to check permission on ID field, It is not required and would only add the ambiguity.



                  Rather you should first check access on object itself then on it's fields.







                  share|improve this answer












                  share|improve this answer



                  share|improve this answer










                  answered 1 hour ago









                  Mr.Frodo

                  4,7831930




                  4,7831930






















                      up vote
                      0
                      down vote













                      As per my research ID field is not available for set FLS at the profile level. Then it not required to check isAccessible() prior to query. Further, if you have read access to object ID field is accessible by default.





                      share
























                        up vote
                        0
                        down vote













                        As per my research ID field is not available for set FLS at the profile level. Then it not required to check isAccessible() prior to query. Further, if you have read access to object ID field is accessible by default.





                        share






















                          up vote
                          0
                          down vote










                          up vote
                          0
                          down vote









                          As per my research ID field is not available for set FLS at the profile level. Then it not required to check isAccessible() prior to query. Further, if you have read access to object ID field is accessible by default.





                          share












                          As per my research ID field is not available for set FLS at the profile level. Then it not required to check isAccessible() prior to query. Further, if you have read access to object ID field is accessible by default.






                          share











                          share


                          share










                          answered 7 mins ago









                          chamika

                          114




                          114



























                               

                              draft saved


                              draft discarded















































                               


                              draft saved


                              draft discarded














                              StackExchange.ready(
                              function ()
                              StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsalesforce.stackexchange.com%2fquestions%2f234009%2fdo-we-need-to-check-fls-for-record-id-field-in-apex%23new-answer', 'question_page');

                              );

                              Post as a guest
































































                              Comments

                              Post a Comment

                              Popular posts from this blog

                              What does second last employer means? [closed]

                              Image
                              Clash Royale CLAN TAG #URR8PPP .everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty margin-bottom:0; up vote -3 down vote favorite Say, for example I have worked in the following companies, Company A => 2010 - 2011 Company B => 2011 - 2012 Company C => 2012 - Till Date Company D => Have offer Now assume Company D is asking to submit documents from my second last employer. So from the list of companies given, which company would be qualified as second last employer? software-industry employer share | improve this question asked Aug 10 '14 at 5:16 Rajaprabhu Aravindasamy 559 1 6 13 closed as off-topic by Jim G., jmort253 ♦ Aug 11 '14 at 1:58 This question appears to be off-topic. The users who voted to close gave this specific reason: "Questions seeking advice on company-specific regulations, agreements, or policies should be directed to your manager or HR department. Questions that address...
                              Read more

                              List of Gilmore Girls characters

                              Image
                              The season three cast—(Back row): Lane, Michel, Paris, Emily, Richard, Sookie, Miss Patty, Kirk; Front row: Jess, Luke, Lorelai, Rory, Dean This is a list of characters for the comedy-drama television series Gilmore Girls . Contents 1 Main characters 1.1 Lorelai Gilmore 1.2 Rory Gilmore 1.3 Sookie St. James 1.4 Lane Kim 1.5 Michel Gerard 1.6 Luke Danes 1.7 Emily Gilmore 1.8 Richard Gilmore 1.9 Paris Geller 1.10 Dean Forester 1.11 Jess Mariano 1.12 Kirk Gleason 1.13 Jason Stiles 1.14 Logan Huntzberger 2 Major recurring characters 2.1 Christopher Hayden 2.2 Jackson Belleville 2.3 Mrs. Kim 2.4 Tristin DuGray 2.5 Max Medina 2.6 Taylor Doose 2.7 Dave Rygalski 2.8 Marty 3 Recurring characters 3.1 Stars Hollow 3.2 Chilton 3.3 Yale 3.4 Other 4 Notable guest stars 5 Unseen characters 6 Notes 7 References Main characters Actor Character Appearances Season 1 Season 2 Season 3 Season 4 Season 5 Season 6 Season 7 A Year in the Life Lauren Graham Lorelai Gilmore...
                              Read more

                              One-line joke

                              A one-liner is a joke that is delivered in a single line. A good one-liner is said to be pithy - concise and meaningful. [1] Comedians and actors use this comedic method as part of their act, e.g. Jimmy Carr, Tommy Cooper, Rodney Dangerfield, Norm Macdonald, Ken Dodd, Stewart Francis, Zach Galifianakis, Mitch Hedberg, Anthony Jeselnik, Milton Jones, Shappi Khorsandi, Jay London, Mark Linn-Baker, Demetri Martin, Groucho Marx, Dan Mintz, Emo Philips, Tim Vine, Steven Wright and Henny Youngman and Arnold Schwarzenegger. [ citation needed ] Many fictional characters are also known to deliver one-liners, including James Bond, who usually includes pithy and laconic quips after disposing of a villain. [ citation needed ] Examples "A baby seal walks into a club." "A dyslexic man walks into a bra." (Anonymous) "There are three types of people, those who can count and those who can't." "Venison's dear, isn't it?" (Jimmy Carr) "An escala...
                              Read more