3277798 - Business User Assigned to Archiving Work Center View Can Access Any Object Archived

You assigned a business user to Archiving work center view and you realize that the user can see any object archived, even those objects that the user should not have access to.

SAP Cloud for Customer

1. Login Using a Business User.
2. Go to Archiving work center view. 
3. Filter by an Object.
4. Select an Instance (i.e. select an instance that the user did not have access to).
5. Open it.
6. It opens accordingly. 

When an instance gets archived, those pre-checks for verifying access restrictions of the user are not anymore executed as it was previously done when instance was not archived yet (i.e. when user used to open instance through work center view directly).

This is a system designed behavior. The Archiving work center view is supposed to be used by administrators and hence, it does not check user access restrictions to archived instances. Consequently, the user assigned to Archiving work center view can open any Archived Instance.

Archiving

archiving, archived, opportunity, ticket, business user, access restriction , KBA , LOD-CRM-ARC , C4C Archiving , How To

SAP Cloud for Customer add-ins all versions ; SAP Cloud for Customer core applications all versions