https://whoseeswhat.com/ Notes from the team building a Salesforce access oracle. https://whoseeswhat.com/blog/2026-07-07-field-level-security-the-layer-people-forget/ https://whoseeswhat.com/blog/2026-07-07-field-level-security-the-layer-people-forget/ Tue, 07 Jul 2026 00:00:00 GMT You can lock down records perfectly and still expose the one field that mattered. Field-level security is the quiet last layer of Salesforce access. Salesforce security salesforce security field-level-security access https://whoseeswhat.com/blog/2026-07-05-permission-sets-vs-profiles/ https://whoseeswhat.com/blog/2026-07-05-permission-sets-vs-profiles/ Sun, 05 Jul 2026 00:00:00 GMT Profiles and permission sets both grant the same powerful permissions. The difference in how they are managed is where a lot of excess access comes from. Best practices salesforce security permissions least-privilege https://whoseeswhat.com/blog/2026-07-03-sharing-rules-power-and-risk/ https://whoseeswhat.com/blog/2026-07-03-sharing-rules-power-and-risk/ Fri, 03 Jul 2026 00:00:00 GMT Sharing rules are how you open Salesforce access sideways. They are also the layer most likely to accumulate quietly until no one can explain it. Salesforce security salesforce security sharing access https://whoseeswhat.com/blog/2026-07-01-safe-with-full-access-by-design/ https://whoseeswhat.com/blog/2026-07-01-safe-with-full-access-by-design/ Wed, 01 Jul 2026 00:00:00 GMT Read-only was never the real reason Who Sees What is safe to connect. The real reason is how it is engineered, and that is what lets the safety story hold even for tools that need to act. Salesforce security salesforce security trust architecture https://whoseeswhat.com/blog/2026-07-01-the-role-hierarchy-is-not-an-org-chart/ https://whoseeswhat.com/blog/2026-07-01-the-role-hierarchy-is-not-an-org-chart/ Wed, 01 Jul 2026 00:00:00 GMT Salesforce role hierarchies look like reporting lines, so people build them that way. That is where a lot of accidental access comes from. Salesforce security salesforce security roles hierarchy https://whoseeswhat.com/blog/2026-06-29-org-wide-defaults-the-floor-of-your-sharing-model/ https://whoseeswhat.com/blog/2026-06-29-org-wide-defaults-the-floor-of-your-sharing-model/ Mon, 29 Jun 2026 00:00:00 GMT Org-wide defaults are the most consequential access setting in Salesforce, and the easiest to set once and forget. Here is how to think about them. Salesforce security salesforce security owd sharing https://whoseeswhat.com/blog/2026-06-27-read-only-by-design/ https://whoseeswhat.com/blog/2026-06-27-read-only-by-design/ Sat, 27 Jun 2026 00:00:00 GMT Before you connect any tool to your Salesforce org, you should know exactly what it can do. Here is the short, honest version for Who Sees What. Security salesforce security trust data-handling https://whoseeswhat.com/blog/2026-06-25-the-salesforce-access-layers-explained/ https://whoseeswhat.com/blog/2026-06-25-the-salesforce-access-layers-explained/ Thu, 25 Jun 2026 00:00:00 GMT Who can see a record in Salesforce is decided by seven layers stacked on top of each other. Here is what each one does, in plain language. Salesforce security salesforce security access sharing https://whoseeswhat.com/blog/2026-06-23-quiet-ways-salesforce-access-creeps-wider/ https://whoseeswhat.com/blog/2026-06-23-quiet-ways-salesforce-access-creeps-wider/ Tue, 23 Jun 2026 00:00:00 GMT Access in Salesforce almost never shrinks on its own. Here are the everyday mechanisms that widen it, usually without anyone deciding to. Salesforce security salesforce security access sharing https://whoseeswhat.com/blog/2026-06-23-who-can-see-this-record-in-five-minutes/ https://whoseeswhat.com/blog/2026-06-23-who-can-see-this-record-in-five-minutes/ Tue, 23 Jun 2026 00:00:00 GMT The question sounds simple and the manual answer is anything but. Here is the fast way to get a complete, defensible answer. Best practices salesforce access how-to https://whoseeswhat.com/blog/2026-06-22-introducing-who-sees-what/ https://whoseeswhat.com/blog/2026-06-22-introducing-who-sees-what/ Mon, 22 Jun 2026 00:00:00 GMT A read-only way to answer the question every Salesforce admin eventually gets asked: who can see this, and why? Announcements salesforce security launch