News for hackers. Stuff that matters.

A comment on Salesforce enables ‘modify all’ in user profiles. Parent comment

Re:Salesforce enables ‘modify all’ in user profiles by q3k on Friday May 17, 2019 @09:28PM (#19945031)
> Presumably this should cause most companies in the EU to announce, within 72 hours, a data breach, since it allows any salesforce user to gain any permissions and view/leak/copy/steal any data on any customer in the org.

Presumably most users already have an NDA signed? Doesn't that cover PII?

[ Parent | on HN ]
Re:Salesforce enables ‘modify all’ in user profiles by TrickyRick on Saturday May 18, 2019 @05:39AM (#19946541)
NDA can be breached. What matters if the data was leaked or not, not if it was done legally (Data breaches seldom are)
[ Parent | on HN ]