Field Level Security

Control how DML operations respect field-level security (FLS) permissions.

Example

System.runAs(minimalAccessUser) {
    new DML()
        .toInsert(new Case(Subject = 'New Case'))
        .userMode() // by default
        .commitWork();
}

userMode

Execute DML operations respecting user permissions. This is the default behavior.

Signature

Commitable userMode();

Standard DML

insert as user new Account(Name = 'My Account');

DML Lib

new DML()
    .toInsert(new Account(Name = 'My Account'))
    .userMode() // This is the default, can be omitted
    .commitWork();

systemMode

Execute DML operations bypassing user permissions. Use this when you need to perform operations that the current user may not have access to.

Signature

Commitable systemMode();

Standard DML

insert as system new Case(Subject = 'System Mode Case');

DML Lib

new DML()
    .toInsert(new Case(Subject = 'System Mode Case'))
    .systemMode()
    .commitWork();

WARNING

Use systemMode() with caution. It bypasses field-level security, which could expose sensitive data or allow unauthorized modifications. Only use it when absolutely necessary.

Combining with Sharing Mode

Field-level security and sharing mode are independent settings that work together.

Configuration	FLS	Sharing Rules
userMode()	Enforced	Enforced
userMode().withSharing()	Enforced	Enforced
userMode().withoutSharing()	Enforced	Enforced
systemMode().withSharing()	Bypassed	Enforced
systemMode().withoutSharing()	Bypassed	Bypassed

Example

// Bypass FLS but enforce sharing rules
new DML()
    .toUpdate(record)
    .systemMode()
    .withSharing()
    .commitWork();

// Bypass both FLS and sharing rules
new DML()
    .toUpdate(record)
    .systemMode()
    .withoutSharing()
    .commitWork();