A user has restricted Write access for objects (Visits in our example) yet they are still able to set the Visit to Complete from the OWL.
SAP Cloud for Customer
Reproducing the Issue
- Go to the Visits workcenter.
- Select any Visit.
- Click More > Set as Complete.
Result: the Visit can be set to Complete despite a valid Write Restriction for Visits.
Your user has the Data Protection and Privacy work center with Personal Data Disclosure and Personal Data Removal views assigned, with unrestricted access.
The Data Protection and Privacy work center is meant for administrators (who always have full access to the system). Hence, this work center assignment overwrites other restrictions.
You can remove the access rights for the Data Protection and Privacy work center if you wish the system to use the access restrictions defined for that user/role for other views (such as Visits, Tickets, Opportunities, etc).
access rights, access restrictions, visits, tickets, opportunities, sales quotes, sales orders, object, view, Data Protection and Privacy, Personal Data Disclosure, Personal Data Removal , KBA , LOD-CRM-OPP , Opportunity Management , LOD-CRM-ACT-VST , Visit Planning , LOD-CRM-ACT , Activities , Problem