Symptom
A Delegate is able to Access Administrator workcenter.
Environment
SAP Hybris Cloud for Customer
Reproducing the Issue
- Log-in as a Delegate.
-
Go to Administrator workcenter.
- Select Users view.
- Open Delegates Sub-view.
- Now create a New substitution for an Employee.
A user who has Delegate access can assign Delegate for an Admin. This can create a security issue in this case as Delegates have Admin rights.
Cause
By default all the workcenters are assigned to a Delegate. Check if you have selected all the workcenters.
Resolution
When you create a new Delegate, you can select the work centers you want to assign the Delegate.
Keywords
Delegates, Administrator , Access for Delegate , KBA , LOD-LE-PRD-PRD , Product + Product Category Hierarchy , Problem
Product
SAP Cloud for Customer add-ins all versions ; SAP Cloud for Customer core applications all versions