Salesforce OWD and sharing rules questions