Skip to main content

KI-18

Key/SummaryKI-18 Critical Update Regression: Restrict Access to @AuraEnabled Apex Methods for Authenticated Users Based on User ProfileStatusDone
Created09/18/2019Updated12/19/2019
DescriptionThe Winter 20 release of Salesforce.com includes a new Critical Update that, when enabled, results in exceptions to be thrown within the application for several user actions. The critical update in question is "Restrict Access to @AuraEnabled Apex Methods for Authenticated Users Based on User Profile" ( https://releasenotes.docs.salesforce.com/en-us/winter20/release-notes/rn_lc_restrict_apex_authenticated_users.htm )
Impacted CapabilitiesAffected AppsMedical Information Cloud - Classic Medical Information Cloud - Lightning
Affects VersionsFix VersionV8
Steps to Reproduce1. Enable the critical update 2. Attempt to generate an Interaction Snapshot as an MIC User (not admin) 3. Observe the error message indicating something similar to: You do not have access to the Apex class named 'MED_RunDDPCtrl'.
WorkaroundGrant access to the following apex classes to the MIC Users. This can be done either through the use of a permission set OR at the User profile level. Impacted classes are as follows: - MED_AsyncApexJobCtrl - MED_CloseInteractionCtrl - MED_E2BGenerateCtrl - MED_InstalledProductsCtrl - MED_HomePageController - MED_LightningLookupCtrl - MED_RunDDPCtrl - MED_UploadFileCtrl