Impact Area
Security
Severity
High
Affected Element
Profile
Permission Set
SF-AVOID-USE-APEX-REST-PERMISSION
Do Not Grant “Apex REST Services” Permission
Granting “Apex REST Services” permission enables access to custom API services, which may expose critical functionality without proper oversight.
Ensure that “Apex REST Services” permissions in Profiles and Permission Sets are reviewed and approved by the CoE.
5 min
All scans