Field Level Security

Control how DML operations respect field-level security (FLS) permissions.

Example

System.runAs(minimalAccessUser) {
    new DML()
        .toInsert(new Case(Subject = 'New Case'))
        .userMode() // by default
        .commitWork();
}

accessMode

Set access mode explicitly using the Salesforce System.AccessLevel enum.

Signature

Commitable accessMode(System.AccessLevel accessMode);

Use accessMode(System.AccessLevel.USER_MODE) as an alternative to userMode(), and accessMode(System.AccessLevel.SYSTEM_MODE) as an alternative to systemMode().

Standard DML

insert as user new Account(Name = 'My Account');
insert as system new Case(Subject = 'System Mode Case');

DML Lib

new DML()
    .toInsert(new Account(Name = 'My Account'))
    .accessMode(System.AccessLevel.USER_MODE)
    .commitWork();

new DML()
    .toInsert(new Case(Subject = 'System Mode Case'))
    .accessMode(System.AccessLevel.SYSTEM_MODE)
    .commitWork();

userMode

Execute DML operations respecting user permissions. This is the default behavior.

Signature

Commitable userMode();

Standard DML

insert as user new Account(Name = 'My Account');

DML Lib

new DML()
    .toInsert(new Account(Name = 'My Account'))
    .userMode() // This is the default, can be omitted
    .commitWork();

systemMode

Execute DML operations bypassing user permissions. Use this when you need to perform operations that the current user may not have access to.

Signature

Commitable systemMode();

Standard DML

insert as system new Case(Subject = 'System Mode Case');

DML Lib

new DML()
    .toInsert(new Case(Subject = 'System Mode Case'))
    .systemMode()
    .commitWork();

WARNING

Use systemMode() with caution. It bypasses field-level security, which could expose sensitive data or allow unauthorized modifications. Only use it when absolutely necessary.

Combining with Sharing Mode

Field-level security and sharing mode are independent settings that work together.

Configuration	FLS	Sharing Rules
userMode()	Enforced	Enforced
accessMode(System.AccessLevel.USER_MODE)	Enforced	Enforced
userMode().withSharing()	Enforced	Enforced
userMode().withoutSharing()	Enforced	Enforced
systemMode().withSharing()	Bypassed	Enforced
accessMode(System.AccessLevel.SYSTEM_MODE).withSharing()	Bypassed	Enforced
systemMode().withoutSharing()	Bypassed	Bypassed
accessMode(System.AccessLevel.SYSTEM_MODE).withoutSharing()	Bypassed	Bypassed

Example

// Bypass FLS but enforce sharing rules
new DML()
    .toUpdate(record)
    .systemMode()
    .withSharing()
    .commitWork();

// Bypass both FLS and sharing rules
new DML()
    .toUpdate(record)
    .systemMode()
    .withoutSharing()
    .commitWork();