Do Not Grant “Apex REST Services” Permission

Impact Area

Security

 

Severity

High

 

Affected Element

Profile

Permission Set

Rule ID #

SF-AVOID-USE-APEX-REST-PERMISSION

Description #

Do Not Grant “Apex REST Services” Permission

Impact #

Granting “Apex REST Services” permission enables access to custom API services, which may expose critical functionality without proper oversight.

Remediation #

Ensure that “Apex REST Services” permissions in Profiles and Permission Sets are reviewed and approved by the CoE.

Time to fix #

5 min

Scan Type #

All scans

Was it helpful ?

THE AI CODE GOVERNANCE BRIEF

Sign up for new updates!