Ask Search:
Jerzy SobonJerzy Sobon 

Process Builder Security Context

Hi everyone:

Would like to know under what security context does Process Builder run? Is it possible for a user to create/edit a record that launches Process Builder that updates another record they don't have the right to update? If it is possible, what happens? Does the user get an error, the sys admin, or nobody is notified.

In other words, is it possible for a user ti launch a Process Builder process that updates some data they don't have the right to update?

Thanks a lot!
Jerzy
 
Best Answer chosen by Jerzy Sobon
Mayank SrivastavaMayank Srivastava
Jerzy, Process Builder runs in the system mode so the object and field level permissions both will be ignored for the user who triggers the Process.
However, if a Process is launching a Flow (which runs in system mode), the whole automation will ru in the system mode.
Hope that makes sense.

All Answers

Mayank SrivastavaMayank Srivastava
Jerzy, Process Builder runs in the system mode so the object and field level permissions both will be ignored for the user who triggers the Process.
However, if a Process is launching a Flow (which runs in system mode), the whole automation will ru in the system mode.
Hope that makes sense.
This was selected as the best answer
Sunil SarillaSunil Sarilla
+ Mayank
Process Builder like Workflows runs in the System Mode hence not restricted by Field Level Security or object level permissions
Flows run in User Mode, Flows when Launched using a Process builder will run in the System mode.
 
Mayank SrivastavaMayank Srivastava
+1,
I have memorized the following image to help me remember:
 
User-added image
Jerzy SobonJerzy Sobon
Thank you Mayank and Sunil! I appreciate your quick responses! Mayank, I love the table you posted. It;s a big help. Thanks!
Tas RansonTas Ranson
I am not 100% sure yet, but I think if a Flow called from a Process Builder has a Wait in it (sometimes used to avoid Mixed DML errors) then the subsequent update will run in User Mode and lose the System Context.    

Also it seems that if the Process used a delayed action to call the flow, then again the flow operates in User Context.  

I haven't done enough testing to prove this 100% but it seems to be causing me lots of issues currently, so if there is anyone who has definitive knowledge on these use cases, I would love to hear it.
Brenda GlasserBrenda Glasser
Tas, I believe I just encountered the same issue you describe - specific to a time delayed action causing a flow error based on the running user not having permission. The immediate actions succeed, but the time delayed actions do not based on user permissions to the field(s). 
Tushar AroraTushar Arora
Hi I was also looking for the information about the mode in which process builder runs. I found mixed information. Here you are saying that process builder runs in system mode and we also have an idea which is demanding this feature https://success.salesforce.com/ideaView?id=08730000000Dx9sAAC . Tralhead module for process builder says nothing about the mode. Anyone having anymore information on this ?
Michael WeiglMichael Weigl
If I post to chatter from a process then it will post using the current user's context. Is this yet something else, perhaps just a special situation?