Symptom
It is possible for users to create opportunities for accounts - even if they do not have write-access for this particular account.
Environment
SAP Cloud for Customer
Cause
As long as the user has read-access for the account, the user can create objects, for example an opportunity, for this account.
We refer to this as a "forward scenario". The opportunity will then not be accessible for the user anymore once it is edited by another user, if restriction rules are applicable.
So in general this implies that you can also create objects for sales areas you are not responsible for.
Resolution
It is the expected current system behaviour that a user can create objects for sales areas they are not responsible for, if they have access to accounts from there.
See Also
Keywords
possible to create, can create without access, Access Restriction 1015 not working , KBA , LOD-CRM-OPP , Opportunity Management , How To