0

Our sharing setup is such that Accounts are private OWD and sharing rules are in place for role hierarchy based sharings and no other sharing criteria

Contacts are marked as "Controlled By Parent" - why can one of my users see a contact that is associated with an Account to which he doesn't have access to? (confirmed there is a Insufficient Permissions when he tries to access the account)

Improve this question
3
  • 1
    If you add the Sharing button to the Contact layout you can see the exact reason.
    – Adrian Larson ♦
    Feb 2, 2018 at 15:42
  • Even with it added to the page layout, no Sharing button is rendered, presumably due to the "Controlled By Parent" setting
    – Rob Cowell
    Feb 2, 2018 at 15:47
  • Hmm...not sure then.
    – Adrian Larson ♦
    Feb 2, 2018 at 15:48

1 Answer 1

Reset to default
3

Found it - a rogue Permission Set that granted View All on Contact.

I had to change OWD on Contact to "Private" instead of "Controlled by Parent" in order to see the Sharing button, which then let me troubleshoot the "Why?", which told me "Adminstrator". From this, I deduced a rogue View All. Thanks to @ittookten on Twitter for helping with suggestions.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .