The Sharing Organization-Wide Defaults report—one of the portal health check reports—lists standard and custom objects and the default access setting for each object. You can use this report to review and edit the organization-wide default settings that expose records to portal users.
Required Editions
| View supported editions |
| User Permissions Needed | |
|---|---|
| To view portal health check reports: |
Customize Application AND Manage Users AND Modify All Data |
| To set default sharing access: | Manage Sharing |
Organization-wide default settings specify each object's default access level for users in your organization. If an object's default access level is Public, users with enabled object permissions (“Read,” “Create,” “Edit,” or “Delete”) may be able to access records that they don't own. For example, if the default access setting for the account object is Public Read/Write, then any user with the “Read” permission on the account object can view any account record. When setting organization-wide defaults, you want to make sure you don't let portal users see objects they shouldn't access.
- From Setup, enter Portal Health Check in the Quick Find box, then select Portal Health Check.
-
Click Sharing Organization-Wide Defaults.
The report lists the default access setting for each object. If an object's default access is Public, Show Details (for calendar), or Use (for price book), portal users with object permissions can access other users' records. In this case, the Security column indicates a weak organization-wide default setting. You can view the specific object permissions granted to portal profiles in the Object Access and Field-Level Security report.
If the object's default access is Private, Hide Details (for calendar), or No Access (for price book), the Security column indicates a strong organization-wide default setting. Even with a strong organization-wide default setting, portal users may have access to other users' records through exceptions such as sharing rules.
If Grant Access Using Hierarchies is checked, any user above a record owner in a territory or role hierarchy can access the owner's records for that object.
From the report page, you can:
- Change the organization-wide sharing settings for any object by clicking Edit, then changing the settings on the Organization-Wide Sharing Defaults Edit page.
- Show a filtered list of items by selecting a predefined view from the drop-down list.
- Return to the list of reports by clicking Back to list: Portal Health Check Reports.