2790077 - Team Calendar Entry Can Be Moved Without Write Access "You are not authorized to change the data"

Despite having no write access for the Team Calendar, you are able to move some entries. You get the system messages: "You are not authorized to change the data" but also "Your entries have been saved.".

SAP Cloud for Customer

1. Logon with your user who has NO WRITE access to the Team Calendar view.
2. Go to the Team Calendar view.
3. Find an entry of for example type appointment.
4. Drag and drop it somewhere else.

Result: the calendar entry can be moved and saved despite the system message: "You are not authorized to change the data".

The system checks the access rights for the object itself, according to the activity object (visit, appointment,...). For example, you move an appointment to a different slot, then your access restrictions for the 'Appointments' WoC view will be copied and evaluated.

If your user has the following access rights:

(a) Appointment => Write = Restricted.
(b) Visit => Write = No access.
(c) Team Calendar => Write = No Access.
 
Due to (a) => Drag of Appointment is allowed.
Due to (b) => Drag of Visit is NOT allowed.

KBA , LOD-CRM-CAL , Calendar Control , Problem

SAP Cloud for Customer add-ins all versions ; SAP Cloud for Customer core applications all versions