Hello, as with most posts on here we are having an issue with the Secure Guest User change. We have a record page for a custom object that we need to be shared with the community guest user. The page has a lightning component that is pointing to an apex class using without sharing. We have created a sharing rule for the custom object for Owner Id Begins with 005 and every time the record page is accessed by a guest they are redirected to the login page, instead of going to the record page before Winter 21. Any help would be appreciated, our support tickets go unanswered for a week or two at a time and this is our production environment.
@Nick McGinnis If you use Apex without sharing, you're bypassing the guest user security policy. It looks like your page is requesting a resource that is not exposed to the guest user (thus probably not in the scope of the "apex without sharing" code). I'm not a developer so take my input with a grain of salt.
Here's useful resources on the Guest User Security policy and implementation:
Guest user security policy and timelines
Guest User Security Considerations & Best Practices
cc: @George Abboud
