SAP Knowledge Base Article - Public

2917565 - Access Restriction is not working in the OWL

Symptom

A user has restricted Write access for objects (Visits in our example) yet they are still able to set the Visit to Complete from the OWL.

Environment

SAP Cloud for Customer

Reproducing the Issue

  1. Go to the Visits workcenter.
  2. Select any Visit.
  3. Click More > Set as Complete.

Result: the Visit can be set to Complete despite a valid Write Restriction for Visits.

Cause

Your user has the Data Protection and Privacy work center with Personal Data Disclosure and Personal Data Removal views assigned, with unrestricted access.
 
The Data Protection and Privacy work center is meant for administrators (who always have full access to the system). Hence, this work center assignment overwrites other restrictions.

Resolution

You can remove the access rights for the Data Protection and Privacy work center if you wish the system to use the access restrictions defined for that user/role for other views (such as Visits, Tickets, Opportunities, etc).

Keywords

access rights, access restrictions, visits, tickets, opportunities, sales quotes, sales orders, object, view, Data Protection and Privacy, Personal Data Disclosure, Personal Data Removal , KBA , LOD-CRM-OPP , Opportunity Management , LOD-CRM-ACT-VST , Visit Planning , LOD-CRM-ACT , Activities , Problem

Product

SAP Cloud for Customer add-ins all versions ; SAP Cloud for Customer core applications all versions