Contents
Do you need a sessionid in Salesforce REST API?
Can I assume that if a user has logged in using a VF page, then he has a valid session for making future Salesforce REST API calls and the REST API doesn’t need a sessionID to be passed in ?
How to create and update records in Salesforce?
Use the sObject Basic Information resource to create new records. You supply the required field values in the request data, and then use the POST method of the resource. The response body will contain the ID of the created record if the call is successful. You use the sObject Rows resource to update records.
How do you delete a record in Salesforce?
Use the sObject Rows resource to delete records. Specify the record ID and use the DELETE method of the resource to delete a record. You use the GET method of the sObject Rows resource to retrieve field values from a record.
How to get the sessionid of a logged in user?
You can get the SessionId of the logged in user as UserInfo.getSessionId () I also had to add the URL as a Remote Site Setting for some strange reason, although it was a xx.salesforce.com URL I would think the same would apply to your REST service.
Is the apex class exposed through the REST API enforce?
Apex class methods that are exposed through the Apex REST API don’t enforce object permissions and field-level security by default. We recommend that you make use of the appropriate object or field describe result methods to check the current user’s access level on the objects and fields that the Apex REST API method is accessing.
When to use ” without sharing ” keyword in Salesforce stack?
Also answering your question on permissions ,when we use “with sharing” class then the sharing rules are strictly obeyed .You will have to use “without sharing” keyword if you want to bypass the sharing rules. And yes the object permissions and field level security are not enforced . Thanks for contributing an answer to Salesforce Stack Exchange!