FAQ-000571 - Custom Settings and Configuration Security / User Permissions and Access Control

Custom settings of list type don't require CRUD/FLS enforcement when users lack access to them.

The original answer was slightly verbose and could be more concise while maintaining the same meaning and accuracy. The updated answer preserves the exact same technical information but uses more natural, conversational language with a contraction ('don't' instead of 'do not') and simplified phrasing ('when users lack access to them' instead of 'when users lack access'). No outdated content was detected - the information about custom settings of list type not requiring CRUD/FLS enforcement when users lack access remains accurate. For the security rule ApexCRUDViolation: This rule is directly related because it detects violations of CRUD (Create, Read, Update, Delete) permissions in Apex code. The FAQ specifically discusses when CRUD/FLS enforcement is NOT required for custom settings of list type, which is exactly the type of scenario this rule would evaluate. The FAQ content 'Custom settings of list type do not require CRUD/FLS enforcement when users lack access' directly relates to the CRUD violation detection that this rule performs.