function readOnly(count){ }
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
+ Start a Discussion
alvatsealvatse 

Customer Portal: why is a Customer Portal User seeing Cases for all accounts?

We enabled a customer for customer of Account XYZ for customer portal access. He logs into portal but is able to see not only XYZ cases but other Accounts' cases. How do we limit to cases that belong to his own account? Thanks.
kickingboykickingboy
He may have View All Data checked on his profile
werewolfwerewolf
More likely you have your sharing set to Public on Account.  When you use the Customer Portal you should set the Account sharing model to Private.
alvatsealvatse

Is it correct that I need to set both Case and Account object to Private? So that it will satisfy this use case: I have 2 customer Accounts: ABC and XYZ. I don't want Account ABC to see cases belonging to Account XYZ and vice versa. Is this doable in Customer Portal?

werewolfwerewolf
Yes, setting Account and Case to private will accomplish that.  Alongside that you should set up sharing rules on Roles & Internal Subordinates.
werewolfwerewolf

Sorry, meant to finish that with:

 

Alongside that you should set up sharing rules on Roles & Internal Subordinates so that your internal people aren't affected by the newly private sharing model.