Symptom
A user with valid Read Access Restriction can access Territories that are not assigned to them.
Environment
SAP Sales Cloud
Reproducing the Issue
Prerequisite: User ABC has a valid Read Access Restriction for the Territories WOCV (ABC stands for the user's name).
- Login with user ABC.
- Go to the Sales work centre.
- Go to the Territories view
- Open random Territories -> user can access them despite not having the necessary Read Access.
Cause
The problem appears only for those Territories which do not have an Owner. All Territories which do not have an Owner can currently be seen by anybody.
Resolution
To avoid this we recommend to assign an Owner to each Territory.
The user can see all the territories in system which do NOT have any owner + s/he can see those territories where he is maintained as owner + s/he can see territories for which s/he is part of the "Territory-Team".
Alternatively, please see the steps outlined in the KBA 2527629 - How to Restrict Homeless Objects from Being Visible.
See Also
2527629 - How to Restrict Homeless Objects from Being Visible
Keywords
territory, access, user, restriction, homeless , KBA , LOD-CRM-TM , Territory Management , Problem