Loading

Salesforce ContentVersion SObject Does Not Support Field Level Security (FLS) — Custom Fields Are Visible to All Profile Users

Date de publication: Jun 25, 2026
Description

Issue

Field Level Security (FLS) is a Salesforce feature that allows administrators to control which users can view or edit specific fields on an object, based on the user's assigned Profile. When an administrator retrieves the metadata of a Profile that includes the ContentVersion SObject — the standard Salesforce object that stores individual versions of files in Salesforce Files — the standard fields of ContentVersion are not included in the exported metadata results.

Cause

The ContentVersion SObject does not support Field Level Security (FLS). Because FLS is not supported on this object, all custom fields added to ContentVersion are automatically visible to users of all Profiles. FLS settings cannot be configured to restrict access to these custom fields.

Behavior Details

When performing a metadata export of a Profile, Salesforce exports the custom fields of ContentVersion because they are visible to all profiles by default. However, none of the standard fields of ContentVersion are exported in the Profile metadata, because standard fields on SObjects that do not support FLS are excluded from Profile metadata exports.

Résolution

If your Salesforce org has custom fields on the ContentVersion object that contain sensitive data, be aware that FLS cannot restrict access to those fields. Any user with access to files in Salesforce Files can potentially see these custom field values. Consider whether sensitive data should be stored in ContentVersion or in a separate Salesforce SObject that supports FLS, so that field-level access controls can be applied appropriately.

Numéro d’article de la base de connaissances

000380808

 
Chargement
Salesforce Help | Article