Testing Portal Permissions

Test portals as real guest users, not only as an administrator who can already see everything.

For each guest role, verify:

• which shared records and forms appear
• whether Viewer and Editor behavior is correct
• whether attachments are hidden or available as intended
• whether user-specific views return only that guest's records
• whether direct links to unrelated records are denied
• whether uploaded files and form submissions land correctly

Test at least two guests with different data. Remove access and confirm it no longer works. Repeat permission checks whenever relationships, views, forms, or sharing rules change.

External access is ready only when both the intended access and the intended denials have been demonstrated.