I have Org-Wide Defaults set to Private/Private with Grant Access Using Hierarchies unchecked on a custom object.
I have a sharing rule that says users may read the object if it is marked Active = True (boolean/checkbox).
For some reason my Portal users can see the inactive object even though none of the internal users can.
If I remove "read" on the object permissions (with the sharing rule in place) for the Portal user, they can't see the object at all.
Can anyone help me understand what I am missing?