Use without sharing for @AuraEnabled Apex Controllers with Implicit Sharing

Status – Awaiting Test

Salesforce Update Description

This critical update changes the behavior of @AuraEnabled Apex controllers that don’t specify with sharing or without sharingto default to without sharing. This change relaxes the security for controllers that don’t explicitly set sharing behavior using these keywords. It’s a best practice to always use with sharing in Apex controllers used with Lightning components.