To increase the security of your Salesforce data, set up your org so that guest users are no longer automatically the owner of records they create in Salesforce Sites. When a guest user creates a record in a Salesforce Site, the record is assigned to a default active user, who becomes the owner.
Where: This change applies to orgs with active Salesforce Sites in Essentials, Unlimited, Performance, and Developer editions.
Why: To follow Salesforce security best practices, designate an internal org user to be the owner of records created by guest users. While we strongly encourage you to assign a default owner, changing record ownership can affect your guest users’ ability to access records. Test all changes in a sandbox environment to see the effects on data sharing and visibility before you change your implementation in production.
How: From Setup, in the Quick Find box, enter Sites, and then select Sites. Select Reassign new records created by guest users to the default owner. Click Save.
If no default owner is chosen in the org, Salesforce automatically assigns the Salesforce Site owner as the owner of records created by guest users.