SAP Knowledge Base Article - Public

2790077 - Team Calendar Entry Can Be Moved Without Write Access "You are not authorized to change the data"

Symptom

Despite having no write access for the Team Calendar, you are able to move some entries. You get the system messages: "You are not authorized to change the data" but also "Your entries have been saved.".

Environment

SAP Cloud for Customer

Reproducing the Issue

  1. Logon with your user who has NO WRITE access to the Team Calendar view.
  2. Go to the Team Calendar view.
  3. Find an entry of for example type appointment.
  4. Drag and drop it somewhere else.

Result: the calendar entry can be moved and saved despite the system message: "You are not authorized to change the data".

Cause

The system checks the access rights for the object itself, according to the activity object (visit, appointment,...). For example, you move an appointment to a different slot, then your access restrictions for the 'Appointments' WoC view will be copied and evaluated.

Resolution

If your user has the following access rights:

(a) Appointment => Write = Restricted.
(b) Visit => Write = No access.
(c) Team Calendar => Write = No Access.
 
Due to (a) => Drag of Appointment is allowed.
Due to (b) => Drag of Visit is NOT allowed.

Keywords

KBA , LOD-CRM-CAL , Calendar Control , Problem

Product

SAP Cloud for Customer add-ins all versions