My company has a custom object which we assign the ownership of to different portal users, based on who is working the record. The issue is, that any portal user can search and view any record of this object type. We cannot have that as there is sensitive, confidential information on them sometimes. Is there a way to have this object only visible to the portal user who is assigned ownership?