#Record Sharing0 discussing

I have a customer on an ERP app 

Customer is wanting to: This is related to sales orders and associated financial documents

The company hierarchy – A manager will lead x# of salesclerks.

Managers see everything in their clerk’s process. The clerks only see the documents they own.  Ken and Frank have the same leader who sees all of our documents however we cannot see each other’s documents

Salesclerk sees only the documents they create and those that contain financial information (sales Price)

In our app we do not use Roles - sigh!

#Permissionset #Security #Record Sharing #Awesome Salesforce Admin

Hi, we have an experience cloud implementation using partner accounts that has account to contact many to many relationships enabled. We’ve discovered that the record sharing across accounts doesn’t really work. For example if I am a manager level employee across multiple accounts I can see my subordinates cases under my direct account relationship but not under any of my indirect account relationships. Similar issues with seeing contacts that have an indirect relationship to accounts I have a relationship with.

We are leaning towards a solution that involves dynamically creating public groups per account and sharing records/users with the public groups programmatically.

Has anyone else found a solution for this issue?

Is it possible to set things up so that someone can see that a record owned by someone else 

#Permissions #Sharing Settings #Sharing #Record Sharing #Sales Cloudexists but can't open that record? 

Say we have a custom object "Custom X" which is a child of Contact. There is a Contact record "Contact A" which has two "Custom X" records. User John owns one and user Abigail owns the other. We don't want John to be able to open Abigail's record and vice versa, but it would be good if John could see that "Contact A" does have another "Custom X" record owned by Abigail.

Is that possible to do?

Has anyone built a flow recently using the new "System Context Without Sharing—Access All Data"? I've got a flow up on a community page with guest user access but for some reason, record sharing is still being respected in the flow. Not sure if there some catch to this or some setting I'm missing somewhere? The documentation from Summer '20 seems to make it clear that this a supported use case of the feature: https://releasenotes.docs.salesforce.com/en-us/summer20/release-notes/rn_forcecom_flow_fbuilder_system_mode_no_sharing.htm

I have a Lightning Knowledge question - I can't seem to find a way in Lightning Knowledge to control record visibility? No OWDs or sharing rules seem to be available. We have 5 record types and 1 record type should only be visible to a small set of users. What is the recommended approach here?