These selected records explain the examples on Why VirtualOrg. They come from the synchronized catalog and its generated test report. This is a dated snapshot, not a fresh acceptance run or a statement that a whole feature family is supported.
A local pass establishes the listed tests on the reported source. A partial reference match applies to the recorded profile. Fully supported applies only when no limitation remains within a row’s declared contract. Importing a permission definition does not establish enforcement for every user or execution path.
Runtime 0.7.25 · Report recorded 2026-10-18T23:25:46.976Z
Tested source 451d23463d9281665d0e752eed47e648a93636a9
Digest sha256:1dc0fc3a28554de5a5c1497aa63941d9e95c7652fc2f735c8a9ae7917f1fe554
Object CRUD permissions
permissions.object-crud-permissions
- Reference status
- Partial
- Local tests
- Local tests passed
- Tested runtime
- 0.7.25
Declared requirements
- A positive example within the declared scope.
- Boundary and invalid-input examples with expected errors.
- Authorization and transaction behavior where applicable.
- A reproducible reference observation or exact official specification.
- A Virtual Org result bound to code revision, runtime configuration, and fixture digest.
Scope and limitations
- Profile-owned and assigned permission sets; Modify/View All Data; no permission set groups or muting
- Create/edit without delete: DELETE fails INSUFFICIENT_ACCESS_OR_READONLY; updates without edit fail CANNOT_INSERT_UPDATE_ACTIVATE_ENTITY
- Differential match is profile-bound; broader parity unverified
Tests: VO-DIFF-007, VO-E2E-007, VO-DIFF-051, VO-DIFF-052. Exact test files and admitted reference receipts are in the structured snapshot.
Profile object permissions
profiles.profile-object-permissions
- Reference status
- Partial
- Local tests
- Local tests passed
- Tested runtime
- 0.7.25
Declared requirements
- A positive example within the declared scope.
- Boundary and invalid-input examples with expected errors.
- Authorization and transaction behavior where applicable.
- A reproducible reference observation or exact official specification.
- A Virtual Org result bound to code revision, runtime configuration, and fixture digest.
Scope and limitations
- Standard profiles' object permissions and 429 permission flags as recorded for System Administrator, Standard User, Standard Platform User and Minimum Access - Salesforce
- Custom profiles are compared only through metadata deployment
- Differential match is profile-bound; broader parity unverified
Tests: VO-E2E-007, VO-E2E-001, VO-DIFF-1155. Exact test files and admitted reference receipts are in the structured snapshot.
Profile field permissions
profiles.profile-field-permissions
- Reference status
- Experimental
- Local tests
- Local tests passed
- Tested runtime
- 0.7.25
Declared requirements
- A positive example within the declared scope.
- Boundary and invalid-input examples with expected errors.
- Authorization and transaction behavior where applicable.
- A reproducible reference observation or exact official specification.
- A Virtual Org result bound to code revision, runtime configuration, and fixture digest.
Scope and limitations
- Compound fields govern component field access
- Salesforce differential parity not yet verified
- Development0.7.25 admits an existing declared FieldPermissions.Field metadata reference beyond its nominal picklist describe length; ordinary strings remain bounded. The selected source capture and native demo are separate from complete field-permission parity.
Tests: VO-E2E-007, VO-DEMO-002. Exact test files and admitted reference receipts are in the structured snapshot.
Field read access
permissions.field-read-access
- Reference status
- Partial
- Local tests
- Local tests passed
- Tested runtime
- 0.7.25
Declared requirements
- A positive example within the declared scope.
- Boundary and invalid-input examples with expected errors.
- Authorization and transaction behavior where applicable.
- A reproducible reference observation or exact official specification.
- A Virtual Org result bound to code revision, runtime configuration, and fixture digest.
Scope and limitations
- Unreadable fields behave as nonexistent (INVALID_FIELD), including for administrators, as observed
- Differential match is profile-bound; broader parity unverified
Tests: VO-DIFF-007, VO-E2E-007, VO-DIFF-001. Exact test files and admitted reference receipts are in the structured snapshot.
Field edit access
permissions.field-edit-access
- Reference status
- Partial
- Local tests
- Local tests passed
- Tested runtime
- 0.7.25
Declared requirements
- A positive example within the declared scope.
- Boundary and invalid-input examples with expected errors.
- Authorization and transaction behavior where applicable.
- A reproducible reference observation or exact official specification.
- A Virtual Org result bound to code revision, runtime configuration, and fixture digest.
Scope and limitations
- INVALID_FIELD_FOR_INSERT_UPDATE for read-only fields
- Writes to read-only fields fail INVALID_FIELD_FOR_INSERT_UPDATE; describe reports createable/updateable per field security
- Administrators can write standard fields whose profile field permission is read-only (Case.AccountId); custom fields follow field security
- Differential match is profile-bound; broader parity unverified
Tests: VO-DIFF-007, VO-E2E-007, VO-DIFF-052, VO-DIFF-066. Exact test files and admitted reference receipts are in the structured snapshot.
Role hierarchy
sharing.role-hierarchy
- Reference status
- Partial
- Local tests
- Local tests passed
- Tested runtime
- 0.7.25
Declared requirements
- A positive example within the declared scope.
- Boundary and invalid-input examples with expected errors.
- Authorization and transaction behavior where applicable.
- A reproducible reference observation or exact official specification.
- A Virtual Org result bound to code revision, runtime configuration, and fixture digest.
Scope and limitations
- Grant access using hierarchies always on
- Users above a record owner's role read, edit and delete private standard records; access follows role changes; Grant Access Using Hierarchies off for custom objects not tested
- Differential match is profile-bound; broader parity unverified
Tests: VO-E2E-007, VO-DIFF-101. Exact test files and admitted reference receipts are in the structured snapshot.
Owner-based sharing rules
sharing.owner-based-sharing-rules
- Reference status
- Partial
- Local tests
- Local tests passed
- Tested runtime
- 0.7.25
Declared requirements
- A positive example within the declared scope.
- Boundary and invalid-input examples with expected errors.
- Authorization and transaction behavior where applicable.
- A reproducible reference observation or exact official specification.
- A Virtual Org result bound to code revision, runtime configuration, and fixture digest.
Scope and limitations
- Source groups resolve direct, nested, role and role-and-subordinates members
- Recalculated synchronously when group membership or user roles change
- Differential match is profile-bound; broader parity unverified
Tests: VO-META-005, VO-DIFF-037. Exact test files and admitted reference receipts are in the structured snapshot.
Backup export
operations.backup-export
- Reference status
- Experimental
- Local tests
- Local tests passed
- Tested runtime
- 0.7.25
Declared requirements
- A positive example within the declared scope.
- Boundary and invalid-input examples with expected errors.
- Authorization and transaction behavior where applicable.
- A reproducible reference observation or exact official specification.
- A Virtual Org result bound to code revision, runtime configuration, and fixture digest.
Scope and limitations
- virtualorg-export-3: metadata, live records, deployed source, ID sequence and optional R2 file contents; no tokens; recycle bin contents are not exported
- Verified locally only; not run against a deployed Worker
- Salesforce differential parity not yet verified
Tests: VO-E2E-010, VO-E2E-012. Exact test files and admitted reference receipts are in the structured snapshot.
Backup restore
operations.backup-restore
- Reference status
- Experimental
- Local tests
- Local tests passed
- Tested runtime
- 0.7.25
Declared requirements
- A positive example within the declared scope.
- Boundary and invalid-input examples with expected errors.
- Authorization and transaction behavior where applicable.
- A reproducible reference observation or exact official specification.
- A Virtual Org result bound to code revision, runtime configuration, and fixture digest.
Scope and limitations
- Operator-authorized restore into a new org ID, keeping record IDs and re-keying R2 files; issues a session for the restored administrator
- Verified locally only
- Salesforce differential parity not yet verified
Tests: VO-E2E-012. Exact test files and admitted reference receipts are in the structured snapshot.
← Our promise to you · Discuss a workload in the pilot
Read as Markdown · Structured snapshot