Sharing rules: their power, and their risk
Sharing rules are how you open Salesforce access sideways. They are also the layer most likely to accumulate quietly until no one can explain it.
Read the post ‹ Blog 
Tag
#sharing
Org-wide defaults: the floor of your sharing model
Org-wide defaults are the most consequential access setting in Salesforce, and the easiest to set once and forget. Here is how to think about them.
Read the postThe Salesforce access layers, explained
Who can see a record in Salesforce is decided by seven layers stacked on top of each other. Here is what each one does, in plain language.
Read the postThe quiet ways Salesforce access creeps wider
Access in Salesforce almost never shrinks on its own. Here are the everyday mechanisms that widen it, usually without anyone deciding to.
Read the post