Skuid and the Salesforce Guest User¶

Why can’t guest users see my Skuid page?¶

Guest user access to all objects is set to private. This means that Skuid pages, which are saved as records in a custom object, cannot be viewed by a guest user with the default security settings.

Salesforce’s guest user sharing rules provide a solution for unauthenticated users.

Guest user sharing rules and Skuid pages¶

For guest users to view Skuid pages, create sharing rules for Skuid pages in communities, portals, and sites.

To create a sharing rule for a Skuid page or pages:

1. Go to Setup in your Salesforce org.

2. Type Sharing Settings in the Quick Find box and select Sharing Settings.

3. Select Page in the picklist labeled Manage sharing settings for.

   • Or, scroll down the All objects page until you locate Page.

4. In the Sharing Rules section for the Page object, click New.

5. Enter basic information for the rule:

   • Label and Rule Name: A descriptive name for the rule, such as Guest user Skuid page access. The rule name should autopopulate based on your label.
   • Rule type: Guest user access, based on criteria

6. Specify the criteria:

   • Field: Page Name
   • Operator: equals
   • Value: The exact name of the Skuid page

   Note

   Optionally, change the filter logic to allow for one sharing rule to allow access to multiple pages. To do so, click Add Filter Logic and change the relationship between the filters to OR, e.g. 1 OR 2 OR 3

7. In the Share with field, select the guest user to share the page record with.

8. Verify that the level of access is set to Read Only.

9. Click Save.

Now guest users can view Skuid pages.

Creating a permission set for public access¶

While Skuid pages are now accessible and sharing rules are set for objects, the guest user still requires a permission set for object access and some Skuid functionality. To accomplish this, clone the Skuid Page Viewer permission set and modify it as follows:

In Salesforce Setup:

1. Navigate to Permission Sets.
2. Click the Skuid Page Viewer permission set’s label.
3. Click Clone.
4. Enter a label for the cloned permission set, for example Skuid Guest User Access. Update the API Name to match.
5. Click Save.

Next, remove edit and delete permissions to be able to assign this permission set to the guest user. The Skuid Page Viewer permission set has edit permissions on the following objects:

• Feedback
• Feedback Responses
• Files
• Page Interactions
• Personalization Settings

For each of the above objects, complete the following steps:

1. Click on Object Settings.
2. Click on the label of the object to update.
3. Click Edit.
4. For Object Permissions, uncheck Edit and Delete options.
5. Click Save.

Next grant this permission set object read access for any objects used in your Skuid page.

For additional information, refer to Salesforce’s Permission Set documentation.

For more information, see Salesforce’s documentation on creating sharing rules.

With sharing rules set and a permission set created, the guest user must be assigned that permission set and a Skuid license.

Site guest user record settings are updated differently than other Salesforce user types. They are not accessible from the Users menu in Salesforce Setup, but instead are found by navigating the public access settings of your site. Once you’ve found your site’s user record, you can grant the guest user the permission set and a Skuid license.

To navigate to the guest user record:

1. Navigate to User Interface > Sites and Domains > Sites.
2. Click the label of the site.
3. Click Public Access Settings. The profile of the guest user appears.
4. Click View users.
5. Click the full name of the guest user, which looks similair to Site Guest User, <Name of site>. The guest user record page appears.

From here you can assign the permission set and a Skuid license. To assign the permissions set:

1. In the Permission Set Assignments section, click Edit Assignments.
2. Click the label of the permission set you cloned earlier granting object access.
3. Click Add.
4. Click Save.

To assign a Skuid license:

1. In the Managed Packages section, click Assign Licenses.
2. Click the checkbox on the Skuid package’s row.
3. Click Add.

Allowing guest users to edit records¶

While the above instructions illustrate how to create a read-only guest user Skuid implementation, it is possible to allow guest users to edit Salesforce object records. Doing so requires use of Apex, flows, and Salesforce-specific implementation details that are outside the scope of Skuid documentation.

If your implementation requires the guest user make record updates, consult Salesforce’s Guest User Record Access Development Best Practices

Also consider alternative strategies, like purchasing Salesforce authenticated user licenses.

Troubleshooting¶