sf-data-extractor 1.0.2 → 1.0.4

package/README.md

@@ -18,6 +18,9 @@
 
 - ![sf-data-extract](https://raw.githubusercontent.com/mchinnappan100/npmjs-images/main/sf-data-extract/sf-data-export-1.png)
 
+## Security check load plan
+- [Load Plan Security](https://raw.githubusercontent.com/mchinnappan100/npmjs-images/main/sf-data-extract/load-plan-security.json))
+
 ## 📋 Prerequisites
 
 - Node.js >= 14.0.0

package/index.js

@@ -59,6 +59,7 @@ async function main() {
         
         results.push({
           object: obj.object,
+          description: obj.description || '',
           query: obj.query,
           recordCount: recordCount,
           csvPath: csvPath,
@@ -71,6 +72,7 @@ async function main() {
         console.error(`  ❌ Error extracting ${obj.object}:`, error.message);
         results.push({
           object: obj.object,
+          description: obj.description || '',
           query: obj.query,
           recordCount: 0,
           error: error.message,
@@ -158,6 +160,7 @@ async function createZipArchive(results, outputDir, zipPath) {
 function generateHTML(results, orgUsername) {
   const dataJson = JSON.stringify(results.map(r => ({
     object: r.object,
+    description: r.description,
     query: r.query,
     recordCount: r.recordCount,
     status: r.status,
@@ -269,6 +272,7 @@ function generateHTML(results, orgUsername) {
       const list = document.getElementById('objectList');
       list.innerHTML = objects.map((obj, idx) => {
         const statusColor = obj.status === 'success' ? 'bg-green-500' : 'bg-red-500';
+        const description = obj.description ? \`<div class="text-xs text-gray-500 mt-1 line-clamp-2" title="\${escapeHtml(obj.description)}">\${escapeHtml(obj.description)}</div>\` : '';
         return \`
           <div 
             class="p-3 mb-2 bg-dark-bg hover:bg-slate-700 rounded-lg cursor-pointer transition-colors border border-dark-border hover:border-blue-500"
@@ -277,9 +281,10 @@ function generateHTML(results, orgUsername) {
           >
             <div class="flex items-start justify-between mb-1">
               <span class="font-medium text-sm text-white">\${obj.object}</span>
-              <span class="w-2 h-2 rounded-full \${statusColor} mt-1"></span>
+              <span class="w-2 h-2 rounded-full \${statusColor} mt-1 flex-shrink-0"></span>
             </div>
-            <div class="text-xs text-gray-400">
+            \${description}
+            <div class="text-xs text-gray-400 mt-1">
               \${obj.status === 'success' ? \`\${obj.recordCount} records\` : 'Error'}
             </div>
           </div>
@@ -303,14 +308,19 @@ function generateHTML(results, orgUsername) {
       const header = document.getElementById('objectHeader');
       const content = document.getElementById('contentArea');
       
-      // Reset pagination
+      // Reset pagination and filtered data
       currentPage = 1;
       filteredData = obj.data || [];
       
+      const descriptionHTML = obj.description ? \`
+        <p class="text-sm text-gray-400 mt-2">\${escapeHtml(obj.description)}</p>
+      \` : '';
+      
       header.innerHTML = \`
         <div class="flex items-center justify-between">
           <div>
             <h2 class="text-2xl font-bold text-white">\${obj.object}</h2>
+            \${descriptionHTML}
             <p class="text-sm text-gray-400 mt-1">\${obj.recordCount} records extracted</p>
           </div>
           <button 
@@ -368,22 +378,20 @@ function generateHTML(results, orgUsername) {
                 />
               </div>
             </div>
-            <div class="overflow-x-auto">
-              \${renderDataTable(obj.data)}
+            <div class="overflow-x-auto" id="tableContainer">
+              \${renderDataTable()}
             </div>
-            <div id="paginationContainer"></div>
           </div>
         </div>
       \`;
     }
 
-    function renderDataTable(data) {
-      if (!data || data.length === 0) {
+    function renderDataTable() {
+      if (!filteredData || filteredData.length === 0) {
         return '<p class="text-gray-500 text-center py-8">No data available</p>';
       }
       
-      filteredData = data;
-      const headers = Object.keys(data[0]);
+      const headers = Object.keys(filteredData[0]);
       const totalPages = rowsPerPage === -1 ? 1 : Math.ceil(filteredData.length / rowsPerPage);
       const startIdx = rowsPerPage === -1 ? 0 : (currentPage - 1) * rowsPerPage;
       const endIdx = rowsPerPage === -1 ? filteredData.length : startIdx + rowsPerPage;
@@ -413,6 +421,7 @@ function generateHTML(results, orgUsername) {
             \`).join('')}
           </tbody>
         </table>
+        <div id="paginationContainer"></div>
       \`;
       
       // Render pagination after table
@@ -496,18 +505,24 @@ function generateHTML(results, orgUsername) {
       if (page < 1 || page > totalPages) return;
       
       currentPage = page;
-      renderObjectDetails(currentObject);
+      const container = document.getElementById('tableContainer');
+      if (container) {
+        container.innerHTML = renderDataTable();
+      }
     }
 
     function changeRowsPerPage() {
       const select = document.getElementById('rowsPerPageSelect');
       rowsPerPage = parseInt(select.value);
       currentPage = 1;
-      renderObjectDetails(currentObject);
+      const container = document.getElementById('tableContainer');
+      if (container) {
+        container.innerHTML = renderDataTable();
+      }
     }
 
     function sortTable(column) {
-      if (!currentObject || !currentObject.data) return;
+      if (!currentObject || !filteredData) return;
       
       if (currentSort.column === column) {
         currentSort.direction = currentSort.direction === 'asc' ? 'desc' : 'asc';
@@ -516,7 +531,7 @@ function generateHTML(results, orgUsername) {
         currentSort.direction = 'asc';
       }
       
-      currentObject.data.sort((a, b) => {
+      filteredData.sort((a, b) => {
         const aVal = a[column] || '';
         const bVal = b[column] || '';
         
@@ -524,7 +539,11 @@ function generateHTML(results, orgUsername) {
         return currentSort.direction === 'asc' ? compare : -compare;
       });
       
-      renderObjectDetails(currentObject);
+      currentPage = 1;
+      const container = document.getElementById('tableContainer');
+      if (container) {
+        container.innerHTML = renderDataTable();
+      }
     }
 
     function filterTable() {
@@ -541,7 +560,10 @@ function generateHTML(results, orgUsername) {
       }
       
       currentPage = 1;
-      renderObjectDetails(currentObject);
+      const container = document.getElementById('tableContainer');
+      if (container) {
+        container.innerHTML = renderDataTable();
+      }
     }
 
     function exportCSV() {
@@ -571,7 +593,8 @@ function generateHTML(results, orgUsername) {
       document.getElementById('objectSearch').addEventListener('keyup', (e) => {
         const search = e.target.value.toLowerCase();
         const filtered = data.filter(obj => 
-          obj.object.toLowerCase().includes(search)
+          obj.object.toLowerCase().includes(search) ||
+          (obj.description && obj.description.toLowerCase().includes(search))
         );
         renderObjectList(filtered);
       });

package/load-plans/load-plan-security.json

@@ -0,0 +1,212 @@
+[
+  {
+    "object": "EntityDefinition",
+    "compositeKeys": ["DurableId"],
+    "description": "Identifies sharing model settings for all customizable objects to detect overly permissive configurations",
+    "query": "SELECT DurableId, QualifiedApiName, InternalSharingModel, ExternalSharingModel FROM EntityDefinition WHERE IsCustomizable = true",
+    "fieldMappings": {
+      "DurableId": "DurableId",
+      "QualifiedApiName": "QualifiedApiName",
+      "InternalSharingModel": "InternalSharingModel",
+      "ExternalSharingModel": "ExternalSharingModel"
+    }
+  },
+  {
+    "object": "Group",
+    "compositeKeys": ["Id"],
+    "description": "Retrieves organization-wide default settings to review baseline sharing rules",
+    "query": "SELECT Id, Name, Type FROM Group WHERE Type = 'Organization' LIMIT 1",
+    "fieldMappings": {
+      "Id": "Id",
+      "Name": "Name",
+      "Type": "Type"
+    }
+  },
+  {
+    "object": "PermissionSet",
+    "compositeKeys": ["Id"],
+    "description": "Lists all custom permission sets including those with elevated system permissions like Modify All Data and View All Data",
+    "query": "SELECT Id, Name, Label, IsOwnedByProfile, PermissionsModifyAllData, PermissionsViewAllData, PermissionsManageUsers FROM PermissionSet WHERE IsOwnedByProfile = false",
+    "fieldMappings": {
+      "Id": "Id",
+      "Name": "Name",
+      "Label": "Label",
+      "IsOwnedByProfile": "IsOwnedByProfile",
+      "PermissionsModifyAllData": "PermissionsModifyAllData",
+      "PermissionsViewAllData": "PermissionsViewAllData",
+      "PermissionsManageUsers": "PermissionsManageUsers"
+    }
+  },
+  {
+    "object": "FieldPermissions",
+    "compositeKeys": ["ParentId", "Field"],
+    "description": "Identifies field-level edit permissions on sensitive security objects (User, Profile, PermissionSet) that could enable privilege escalation",
+    "query": "SELECT ParentId, Field, PermissionsEdit, PermissionsRead, SobjectType FROM FieldPermissions WHERE PermissionsEdit = true AND SobjectType IN ('User','Profile','PermissionSet')",
+    "fieldMappings": {
+      "ParentId": "ParentId",
+      "Field": "Field",
+      "PermissionsEdit": "PermissionsEdit",
+      "PermissionsRead": "PermissionsRead",
+      "SobjectType": "SobjectType"
+    }
+  },
+  {
+    "object": "Profile",
+    "compositeKeys": ["Id"],
+    "description": "Lists all standard user profiles with their system-level permissions to identify overly privileged profiles",
+    "query": "SELECT Id, Name, UserLicense.Name, PermissionsModifyAllData, PermissionsViewAllData, PermissionsManageUsers, PermissionsApiEnabled FROM Profile WHERE UserType = 'Standard'",
+    "fieldMappings": {
+      "Id": "Id",
+      "Name": "Name",
+      "UserLicenseName": "UserLicense.Name",
+      "PermissionsModifyAllData": "PermissionsModifyAllData",
+      "PermissionsViewAllData": "PermissionsViewAllData",
+      "PermissionsManageUsers": "PermissionsManageUsers",
+      "PermissionsApiEnabled": "PermissionsApiEnabled"
+    }
+  },
+  {
+    "object": "User",
+    "compositeKeys": ["Username"],
+    "description": "Identifies active users who haven't logged in for 90+ days, indicating potential stale accounts that should be deactivated",
+    "query": "SELECT Id, Username, Email, ProfileId, IsActive, LastLoginDate, CreatedDate FROM User WHERE IsActive = true AND LastLoginDate < LAST_N_DAYS:90",
+    "fieldMappings": {
+      "Id": "Id",
+      "Username": "Username",
+      "Email": "Email",
+      "ProfileId": "ProfileId",
+      "IsActive": "IsActive",
+      "LastLoginDate": "LastLoginDate",
+      "CreatedDate": "CreatedDate"
+    }
+  },
+  {
+    "object": "PermissionSetAssignment",
+    "compositeKeys": ["Id"],
+    "description": "Tracks users assigned permission sets with Modify All Data or View All Data permissions for privilege monitoring",
+    "query": "SELECT Id, PermissionSetId, AssigneeId, PermissionSet.Name, Assignee.Username FROM PermissionSetAssignment WHERE PermissionSet.PermissionsModifyAllData = true OR PermissionSet.PermissionsViewAllData = true",
+    "fieldMappings": {
+      "Id": "Id",
+      "PermissionSetId": "PermissionSetId",
+      "AssigneeId": "AssigneeId",
+      "PermissionSetName": "PermissionSet.Name",
+      "AssigneeUsername": "Assignee.Username"
+    }
+  },
+  {
+    "object": "LoginHistory",
+    "compositeKeys": ["Id"],
+    "description": "Captures all login attempts from the last 30 days to detect potential brute force attacks or unauthorized access attempts",
+    "query": "SELECT Id, UserId, LoginTime, Status, SourceIp, Application FROM LoginHistory WHERE LoginTime = LAST_N_DAYS:30  ORDER BY LoginTime DESC LIMIT 10000",
+    "fieldMappings": {
+      "Id": "Id",
+      "UserId": "UserId",
+      "LoginTime": "LoginTime",
+      "Status": "Status",
+      "SourceIp": "SourceIp",
+      "Application": "Application"
+    }
+  },
+  {
+    "object": "SetupAuditTrail",
+    "compositeKeys": ["Id"],
+    "description": "Monitors all configuration changes in the last 90 days to track security-related modifications and user management activities",
+    "query": "SELECT Id, Action, Section, CreatedById, CreatedBy.Username, CreatedDate FROM SetupAuditTrail WHERE CreatedDate = LAST_N_DAYS:90 ORDER BY CreatedDate DESC",
+    "fieldMappings": {
+      "Id": "Id",
+      "Action": "Action",
+      "Section": "Section",
+      "CreatedById": "CreatedById",
+      "CreatedByUsername": "CreatedBy.Username",
+      "CreatedDate": "CreatedDate"
+    }
+  },
+  {
+    "object": "ObjectPermissions",
+    "compositeKeys": ["ParentId", "SobjectType"],
+    "description": "Identifies profiles and permission sets with Modify All Records permission which bypasses sharing rules",
+    "query": "SELECT ParentId, SobjectType, PermissionsCreate, PermissionsRead, PermissionsEdit, PermissionsDelete, PermissionsViewAllRecords, PermissionsModifyAllRecords FROM ObjectPermissions WHERE PermissionsModifyAllRecords = true",
+    "fieldMappings": {
+      "ParentId": "ParentId",
+      "SobjectType": "SobjectType",
+      "PermissionsCreate": "PermissionsCreate",
+      "PermissionsRead": "PermissionsRead",
+      "PermissionsEdit": "PermissionsEdit",
+      "PermissionsDelete": "PermissionsDelete",
+      "PermissionsViewAllRecords": "PermissionsViewAllRecords",
+      "PermissionsModifyAllRecords": "PermissionsModifyAllRecords"
+    }
+  },
+  {
+    "object": "UserRole",
+    "compositeKeys": ["Id"],
+    "description": "Maps the role hierarchy to understand data visibility through role-based sharing",
+    "query": "SELECT Id, Name, ParentRoleId FROM UserRole",
+    "fieldMappings": {
+      "Id": "Id",
+      "Name": "Name",
+      "ParentRoleId": "ParentRoleId"
+    }
+  },
+  {
+    "object": "User",
+    "compositeKeys": ["Username"],
+    "description": "Lists all users with elevated system permissions (Modify All Data or View All Data) for privileged access review",
+    "query": "SELECT Id, Username, Email, ProfileId, Profile.Name, UserRoleId, IsActive FROM User WHERE Profile.PermissionsModifyAllData = true OR Profile.PermissionsViewAllData = true",
+    "fieldMappings": {
+      "Id": "Id",
+      "Username": "Username",
+      "Email": "Email",
+      "ProfileId": "ProfileId",
+      "ProfileName": "Profile.Name",
+      "UserRoleId": "UserRoleId",
+      "IsActive": "IsActive"
+    }
+  },
+  {
+    "object": "NetworkMemberGroup",
+    "compositeKeys": ["Id"],
+    "description": "Reviews Experience Cloud community member groups for proper external user access controls",
+    "query": "SELECT Id, NetworkId, ParentId FROM NetworkMemberGroup",
+    "fieldMappings": {
+      "Id": "Id",
+      "NetworkId": "NetworkId",
+      "ParentId": "ParentId"
+    }
+  },
+  {
+    "object": "AuthSession",
+    "compositeKeys": ["Id"],
+    "description": "Monitors active authentication sessions from the last 7 days to detect suspicious login patterns or session anomalies",
+    "query": "SELECT Id, UsersId, LoginType, SourceIp, LastModifiedDate FROM AuthSession WHERE LastModifiedDate = LAST_N_DAYS:7",
+    "fieldMappings": {
+      "Id": "Id",
+      "UsersId": "UsersId",
+      "LoginType": "LoginType",
+      "SourceIp": "SourceIp",
+      "LastModifiedDate": "LastModifiedDate"
+    }
+  },
+
+  {
+  "object": "User",
+  "compositeKeys": ["Id"],
+  "description": "Lists all active users assigned the System Administrator profile",
+  "query": "SELECT Id, Name, Username, Email, Profile.Name, IsActive FROM User WHERE IsActive = true AND Profile.Name = 'System Administrator'",
+  "fieldMappings": {
+    "Id": "Id",
+    "Name": "Name",
+    "Username": "Username",
+    "Email": "Email",
+    "IsActive": "IsActive",
+    "ProfileId": {
+      "lookup": {
+        "object": "Profile",
+        "key": "Name",
+        "field": "Profile.Name"
+      }
+    }
+  }
+}
+
+]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sf-data-extractor",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "Extract Salesforce data based on load plan and generate beautiful HTML reports",
   "main": "index.js",
   "bin": {