OmniStudio Security Enforcement — DataMapper Now Runs in User Mode

If your DataMapper needs to query objects that the running user does not have direct access to, use a without sharing Apex class via a Remote Action in OmniStudio. This allows the specific query to run in system context while keeping the rest of your DataMapper in user mode.

Please refer the below for sample code.

global without sharing class DataraptorCustomFunction implements System.Callable {

    public Object call(String action, Map<String,Object> args) {
        Map<String,Object> inputMap = (Map<String,Object>)args.get('input');
        Map<String,Object> outMap   = (Map<String,Object>)args.get('output');
        Map<String,Object> options  = (Map<String,Object>)args.get('options');
        return invokeMethod(action, inputMap, outMap, options);
    }

    global Boolean invokeMethod(
        String methodName,
        Map<String, Object> inputs,
        Map<String, Object> output,
        Map<String, Object> options)
    {
        // Returns the Profile Name of the current logged-in user
        if (methodName == 'GetProfileName') {
            output.put('result',
                [SELECT Profile.Name FROM User
                 WHERE Id = :UserInfo.getUserId()].Profile.Name
            );
        }
        // Returns the Permission Set Assignment Id for the current user
        else if (methodName == 'GetPermisionsSet') {
            List<PermissionSetAssignment> psa =
                [SELECT Id FROM PermissionSetAssignment
                 WHERE AssigneeId = :UserInfo.getUserId() LIMIT 1];
            if (!psa.isEmpty()) {
                output.put('result', (String)psa.get(0).Id);
            }
        }
        // Simple connectivity test
        else if (methodName == 'simpletest') {
            output.put('result', 'simpletestresult');
        }
        return true;
    }
}