Would it be correct to say - if no Role is assigned to a user, the user shall be able to access only those records which are shared using customised sharing rules or can access public Read object’s records or can access records via public groups?