We are turning on customer portal and we need new registered portal users to access custom object records already created (aka. the new portal user doesn't own this record). How do we grant access to this portal user without destroying access to internal users? Some options, but not sure which one to choose...
- change record owner to this new portal user
- OR add portal user role above an internal role in hierarchy (but then how do we make sure no other portal user can access this record?)
- apex managed sharing to share record to the correct contact lookup linked to portal user (but not sure if this works with portal users or when to trigger this)