A POLICY-AWARE ACCESS CONTROL FRAMEWORK FOR FIELD-LEVEL PERMISSIONS IN SALESFORCE LIGHTNING COMPONENTS

Abstract

Salesforce's rapid adoption across industries demands robust access control mechanisms that scale with component-based architecture. Traditional field-level permissions are often inconsistently enforced in Lightning Web Components (LWC), primarily due to server-side data handling and implicit system-level bypasses. This paper presents a Policy-Aware Access Control Framework that integrates role-based and contextual policies at the component level. It addresses security gaps by dynamically interpreting metadata and enforcing declarative access policies during runtime rendering of fields. Our results suggest that this framework significantly improves compliance with enterprise security standards and reduces the likelihood of unauthorized field access.