Auto-Assign field permissions to all profiles

[ianzepp]

When I deploy a github project into a new dev org, I would like for all profiles to have full access to all incoming metadata. When I recently ran through the org-init process, I don't think field security was assigned, because I'm now having to go back into the profile config and enable all tabs, as well as enable read/write on all fields in the packaged code.

[kbromer]

That's because FLS is assigned on the profile - you'd need to either roll permission sets for each combination you want to enable, or you'd have to role custom profiles.

Might be possible to script FLS addition into SysAdmin, though it would be a separate process from deploy, probably something custom

[ianzepp]

Update: we are now using/including permission sets with Bios and Giving so far. There is still some funkiness around user permissions and differences between SF orgs (AllowEmailIC is the one that keeps popping up as a deployment problem, but there are others as well).