My customer community plus users can view contact fields as expected in related lists and list views, but when they click on a contact to view the full record, they see a permission denied message. This seems inconsistent and seems like a bug, although it could be a mistake in my security settings.
My external sharing settings are
– Contact: controlled by parent
– Account: Private
Permissions to the parent account are provided by manual sharing. I have confirmed that the users have the required access by going to the account, clicking on "Sharing" then "Expand list".
The users can see both the Account and Contact tabs, and the Contact tab shows a list of all the contacts as expected. Clicking on any contact gives a permissions error.
The problem is specific to Customer Community Plus users.
Has anyone else seen similar problems or know of a solution? Any suggestions welcome as sf support seem as stuck as I am.
Best Answer
With thanks to Scott Pelak:
If you go to admin/security settings/sharing settings, then set contacts to be private, then this fixes the problem.
In the absence of sharing rules, you'd expect contacts to be private as indicated, but this does not appear to be the case.