+ Start a Discussion

Prevent insert based on user permissions...

All I have a VF page that I insert on a person account that is a rating section.  I want one profile to be able to edit it and another profile only view it.  I have the permissions set for the object it is displaying to read and the fields set to read only, however the profile in the read only group can still update it.  What am I missing?  Do I have to check in the apex if the user has permission to that object?