I have this situation.
In our sharing settings we have Account Sharing Rules that says something like:
Rule 01: If an account record has a value 'ABC' in field01, then ONLY users with Role, 'RoleABC' can see them.
Rule 02: If an account record has a value 'DEF' in field01, then ONLY users with Role, 'RoleDEF' can see them.
However, user with RoleABC tried to search the Account Phone Number (ex. 12345) and he got two Accounts that has 'ABC' and 'DEF' values in their field01 respectively. (Note: Both Accounts have the same phone numbers)
Ex: Search Results for Phone Number - 12345
Acct01: field01 - ABC Phone Number - 12345
Acct02: field01 - DEF Phone Number - 12345
Based on the Sharing Rules, User of RoleDEF should not see Acct01, but in the actual search result, he saw both Acct01 and Acct02.
Can anyone give me some idea why this is happening?
We really think that the fix for this is to recalculate the Sharing Rules for Account since Rule02 is a new rule. However, since this is in our Production, I'm kind of hesitant to do the recalculation until I've exhausted all other explanations.