AGENTFORCE-26.3: Agent Audience or Preference Scope Without RLS
🟡 Medium · Broken Access Control
Detects agent-invoked Apex that reads standing / preference / audience / channel-scope records without with sharing and without USER_MODE. Audience gates described in agent instructions (for example Manager only / Meeting hosts) are then honored on trust rather than Salesforce record-level security.
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-26.3 |
| Severity | Medium |
| Category | Broken Access Control |
| Compliance | SOC2_CC6, HIPAA |
Remediation
Declare the Apex class with sharing (or inherited sharing), run preference / standing queries with AccessLevel.USER_MODE or WITH USER_MODE, and enforce audience membership in Apex against the running user (group / role / custom permission) rather than trusting a stored preference label alone.