Skip to content

Is there a query-based way (using system tables) to check whether a specific presentation object — like a particular form or window — has been granted Full access versus just Query access within a permission set, rather than checking manually?

Answer

There isn't a reliable table/query-based way to determine this directly — it generally has to be verified visually, by identifying which APIs a given form or window actually uses and then cross-checking those specific APIs against what's granted (Full vs Query) within the permission set. When building permission sets meant to be genuinely read-only, active hands-on testing (actually trying the restricted actions as a user with that permission set) is the recommended way to confirm no unintended Full-access grant slipped through in an area you meant to keep query-only.

← Browse Security and access questions