Site guest user receives a ISE when using schema describe on objects indirectly reference a lightning component

Apex , Sites ,

Last updated 2019-04-17 ·Reference W-5932550 ·Reported By 16 users

Fixed - Spring '19 Patch 17.0

Apex Schema.describeSObjects calls from site guest users fail when the object contains any kind of reference to a lightning component, even when the site guest user has full access to the object.

Note: This issue only applies to site guest users. Internal users or community users will not experience the same issue.

On a Lightning enabled org (with site licenses):
1. Create a new custom object, name it CustomObj1 (use all default options).

2. Create a new Site and configure guest user:
A. Enable and register site domain if needed.
B. Create new Site, name it MySite1 (use defaults, home page can be any existing page).
C. Once site is created, go to site details page, click the “Public Access Settings” button.
D. On the guest profile page, click Edit, and grant full CRUD on Custom Object Permissions section to CustomObj1.
E. Note and save the Profile ID (00e) for the guest user from the URL.

3. Open developer console to create new Apex test class. Use the following apex body, replace the 00e profile ID with the Id from step 2.e:

private class W5902525 {
public static testMethod void testRunAs() {
User u = [SELECT Id FROM User WHERE ProfileId='00exx000000ju5o'][0];
System.runAs(u) {
System.debug('Current User: ' + UserInfo.getUserName());
String obj = 'CustomObj1__c';
System.debug(Schema.describeSObjects(new List<String>{obj})[0]);

4. Run the W5902525.testRunAs test method created above. Note that the test should pass without issue.

5. Via Developer Console, create a new Lightning component, name it “MyLightningPage1”, use the following component body contents:
<aura:component implements="lightning:actionOverride" access="global" >

6. Go back to the CustomObj1 object definition page, scroll down to the “Buttons, Links, and Actions” section.
A. Find the New button and click Edit.
B. Under the “Lightning Experience Override” section, select “Lighting Component” and “c:MyLightingPage1”, Save.

7. Go back to the W5902525 test class and re-execute.

Currently, the only workaround is to not use Schema.describeSObjects or to remove the object's reference to the lightning component. In the case above, remove the lightning component override added in step 6 of the repro.

Is it Fixed?

AP0 AP3 AP4 AP5 AP6 AP7 AP8 AP9 AP14 AP15 AP20 AP21 AP22 AP28 CS1 CS2 CS3 CS4 CS5 CS6 CS7 CS8 CS9 CS10 CS109 CS108 CS107 CS106 CS105 CS102 CS101 CS100 CS115 CS110 CS11 CS116 CS12 CS137 CS138 CS13 CS14 CS148 CS142 CS15 CS152 CS151 CS16 CS17 CS18 CS19 CS20 CS21 CS22 CS23 CS24 CS25 CS26 CS27 CS28 CS29 CS30 CS31 CS32 CS33 CS34 CS35 CS36 CS37 CS40 CS41 CS42 CS43 CS44 CS45 CS47 CS50 CS51 CS52 CS53 CS54 CS57 CS58 CS59 CS60 CS61 CS62 CS63 CS64 CS65 CS66 CS67 CS68 CS69 CS70 CS71 CS72 CS73 CS74 CS75 CS76 CS77 CS78 CS79 CS80 CS81 CS82 CS83 CS84 CS85 CS86 CS87 CS88 CS89 CS90 CS91 CS92 CS93 CS94 CS95 CS96 CS97 CS98 CS99 EU7 EU8 EU10 EU12 EU13 EU14 EU15 EU16 EU17 EU18 EU19 EU25 EU26 EU29 EU30 NA104 NA109 NA100 NA101 NA103 NA102 NA105 NA111 NA110 NA112 NA129 NA130 NA136 NA135 NA132 NA131 NA146 NA154 NA155 NA196 NA21 NA32 NA33 NA37 NA39 NA40 NA42 NA44 NA45 NA46 NA47 NA49 NA50 NA51 NA52 NA53 NA54 NA56 NA57 NA58 NA59 NA60 NA61 NA62 NA63 NA64 NA65 NA66 NA67 NA68 NA69 NA70 NA71 NA72 NA73 NA74 NA75 NA76 NA77 NA78 NA79 NA80 NA81 NA82 NA83 NA84 NA85 NA86 NA87 NA88 NA89 NA90 NA91 NA92 NA93 NA94 NA95 NA96 NA97 NA98 NA99 UM1 UM2 UM3 UM4 UM5

Any unreleased services, features, statuses, or dates referenced in this or other public statements are not currently available and may not be delivered on time or at all. Customers who purchase our services should make their purchase decisions based upon features that are currently available.