Impact Area
Security
Severity
High
Affected Element
Profile
Permission Set
Rule ID #
SF-AVOID-USE-QUERY-ALL-FILES-PERMISSION
Description #
Do Not Grant “Query All Files” Permission on Any Object
Impact #
Granting “Query All Files” on any object can expose all files in the organization without control, risking data confidentiality. This rule may raise an issue for each object where this permission is present.
Remediation #
Ensure that “Query All Files” permissions for any object in Profiles and Permission Sets are reviewed and approved by the CoE.
Time to fix #
30 min
Scan Type #
All scans
