0

Our sharing setup is such that Accounts are private OWD and sharing rules are in place for role hierarchy based sharings and no other sharing criteria

Contacts are marked as "Controlled By Parent" - why can one of my users see a contact that is associated with an Account to which he doesn't have access to? (confirmed there is a Insufficient Permissions when he tries to access the account)

  • 1
    If you add the Sharing button to the Contact layout you can see the exact reason. – Adrian Larson Feb 2 '18 at 15:42
  • Even with it added to the page layout, no Sharing button is rendered, presumably due to the "Controlled By Parent" setting – Rob Cowell Feb 2 '18 at 15:47
  • Hmm...not sure then. – Adrian Larson Feb 2 '18 at 15:48
3

Found it - a rogue Permission Set that granted View All on Contact.

I had to change OWD on Contact to "Private" instead of "Controlled by Parent" in order to see the Sharing button, which then let me troubleshoot the "Why?", which told me "Adminstrator". From this, I deduced a rogue View All. Thanks to @ittookten on Twitter for helping with suggestions.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.