A Delegate is able to Access Administrator workcenter.
SAP Hybris Cloud for Customer
Reproducing the Issue
- Log-in as a Delegate.
Go to Administrator workcenter.
- Select Users view.
- Open Delegates Sub-view.
- Now create a New substitution for an Employee.
A user who has Delegate access can assign Delegate for an Admin. This can create a security issue in this case as Delegates have Admin rights.
By default all the workcenters are assigned to a Delegate. Check if you have selected all the workcenters.
When you create a new Delegate, you can select the work centers you want to assign the Delegate.
Delegates, Administrator , Access for Delegate , KBA , LOD-LE-PRD-PRD , Product + Product Category Hierarchy , Problem