Salesforce Winter '20 Critical Updates - Changed Permissions, to be released in Spring 2020

Salesforce Spring '20 forces two critical updates:

The first one is that users will require to use the Customize Application Permission for Direct Read Access to Custom Settings.
→ Where: This change applies to Lightning Experience and Salesforce Classic in Contact Manager, Essentials, Professional, Enterprise, Performance, Unlimited, and Developer editions.
The second one is that users will require Customize Application Permission for Direct Read Access to Custom Metadata Types.
→ Where: This change applies to Lightning Experience and Salesforce Classic in Professional, Enterprise, Performance, Unlimited, Developer, and Database.com editions. Professional Edition orgs can create, edit, and delete custom metadata records only from types in installed packages.

The reason behind those updates is that Salesforce follows a "secure by default" approach meaning those that should have the permission, will need to have it actively enabled.
This change affects Visualforce pages and Lightning components that directly reference custom settings.

When: This critical update is enforced as part of the Spring ’20 release

For ADvendio users, this is of particular importance as some key features within ADvendio which users could previously use, may give an error or an insufficient privileges message if the permission sets are not configured correctly. For example, without this permission set basic features such as the

Campaign Items Related List and the
Ad Specs & Rates Manager

are no longer usable.

Gateway users will not be able to submit or update status' in the AdServer or receive Delivery Data while
Finance users cannot make use of useful features such as the Cancellation, Third Party Commission and
Publisher Payout Contracts Wizards.

This change has the potential to impact all features which depend on Custom Settings and Custom Metadata Types.

What to do:

Packaged Permission Sets

Unfortunately it is technically not possible for our packages Permission Sets to include the needed changes in a release. That is why every customer would need to do this on his own.

Custom Settings

Check the "View All Custom Settings" permission is set to true in your custom profiles or the ADvendio SuperUser Permission Set

Profile

Permission Set

Additional note:

Administrators will also need to have Customize Application set to true in order to have for direct read access to custom settings, manage custom permissions and manage translations. This can either be added to the Permission Set (this permission set can then only be used with Salesforce Licenses) or added to the Admin Profile.

Please note that setting Customize Application to true will automatically set Manage Custom Permissions and Manage Translation to true.

Custom Metadata Types

Go to the profile or permission set you wish to grant access to a specific custom metadata type.
Find the section "Custom Metadata Types".
Click Edit.
If not enabled, add all desired custom metadata type to the list of enabled custom metadata types and Save.