We have some Account records which are private. Users are creating Opportunity records via a VF page where the association with Account records happen automatically. This is our requirement and I don't want to go into detail here.

However, in certain cases, a private Account can get associated to the Opportunity record. This makes SF grant access to everyone/group having atleast read on the opportunity to have read on the private account.

The Sharing detail page shows 'Associated Record Owner or Sharing' as the reason which in API terms means ImplicitParent.

Is there a way to avoid this? I do not want people with access to the opportunity to have access to the private account as well

~LVS