Platform Shield: What happens once field is enabled and then disabled.

Some pointers before enabling the shield on your your app.

Pre-requisite:

  I. Salesforce dev edition org

 II. Basic encryption setup in the profile or via permission set.

III. A custom field on the Account object with at-least data populated in few records.

Observations:

1) Before enabling the encryption :

  i. SOQL – No changes works as expected.

 ii. Report – No changes works as expected.

iii. List View – No changes works as expected

2) Enabling the encryption:

Process to enable the encryption for the field.

a) Go to object.

b) Edit the field

c) Check the encryption box.

d) Click save

 

Once saved, Observe the record.

 

For Date: Encrypted form of date would get updated where in for other formats **** will get updated.

Now we will try to use the following features of SF to see the behavior.

i. SOQL :

When column specified:

 

When specified in WHERE clause:

 

When specified in ORDER BY clause:

 

ii. Report:

Without filter:

 

Trying to filter the encrypted filed which is not allowed:

 

iii. List View:

Normal list view with encrypted fields selected:

 

Custom date field is not available in the filter drop down:

         

3) After disabling the encryption field will not behave normally, shown below.

Disabling the field encryption from field edit shown below:

 

Data will be converted to clear text:

 

Now after this we will see whether we are able to proceed with SOQL, Report and views.

i. SOQL: Field is not allowed.

 

ii. Report: Not allowed.

iii. List View: Not allowed.

Regards

Pradeepkumar Dani