---
schema_version: "1"
id: 6cd52e6a279ff4a4a0527a4a5c64f3b5bc437c371df97f074345c1bf38251aa2
title: Guest User Security Restrictions
collection: developer
version: current
locale: en-us
portal_url: https://docs.salesforce.com/developer/current/en-us/industries/cme/guides/comms-guest-user-security-restrictions_cpq.md
canonical_url: https://developer.salesforce.com/docs/industries/cme/guide/comms-guest-user-security-restrictions_cpq.html
source_site: developer.salesforce.com
content_type: documentation
content_hash: a95b2ec139fc7d9bd4e6b57890765e724d43b318361ed5e338bf61c9f2bc31a5
products:
  - Communications, Media, Energy and Utilities APIs (Managed Package)
  - Industries Developer Documentation
---
# Guest User Security Restrictions

Beginning with the Winter '21 Salesforce release, [Guest Users](https://help.salesforce.com/articleView?id=networks_public_access.htm&type=5), also called anonymous users, cannot access any records by default. This affects all Salesforce orgs.

For more about the guest user implementation for Industries CPQ, see [Guest User Enhancements Overview](https://help.salesforce.com/s/articleView?id=ind.v_admin_guest_user_enhancements_overview_27751.htm).

Beginning with CME Spring '20 Minor Release, Salesforce does not allow guest users to create and update records by default with the exception of Cart-Based and Digital Commerce APIs listed in this topic.

**See Also**

- [Guest User Access](https://www.learncommunitycloud.com/s/article/Guest-User-Record-Access-Development-Best-Practices#SecureGuestUserRecordAccessSetting)
- [Guest User Security Policies and Timelines](https://help.salesforce.com/articleView?id=networks_guest_policies_timelines.htm)
- [Give Secure Access to Unauthenticated Users with the Guest User Profile](https://help.salesforce.com/articleView?id=networks_public_access.htm)