3805885 - My Process Overview shows process information bypassing folder access groups - SAP Signavio Process Manager

My Process Overview is allowing users to see process information bypassing file access groups.

• Product: SAP Signavio Process Manager
• SAP Signavio Process Collaboration Hub

1. Assign a RACI role (Responsible, Accountable, Consulted, Informed) to a user on a process model stored in a folder restricted to admins.
2. Log in as the assigned user and open My Process Overview in Collaboration Hub.
3. Observe that the process and its steps/details appear in My Process Overview, even though the user lacks folder-level access.
4. When clicking the diagram from My Process Overview, the user may be prevented from opening it if folder permissions are correctly enforced.

• My Process Overview is role-driven rather than folder-permission-driven. Any process where a user holds a RACI role can appear in My Process Overview, regardless of the folder’s access rights. Folder permissions still control whether the diagram can be opened.

1. Remove RACI role assignments from sensitive processes for users who should not have visibility via My Process Overview.
2. Restrict Dictionary categories containing sensitive roles: Setup > Manage Users & Access Rights > Access Rights > Dictionary — allow only required categories per user group.
3. Store sensitive processes in restricted folders and grant access only to appropriate admin groups.
4. If needed, disable My Process Overview: Setup > Manage Users & Access Rights > User Groups — open the group, scroll to Feature Sets, and deactivate "My Process Overview".
5. To validate: click the process from My Process Overview and confirm the diagram cannot be opened without folder access. If it opens without folder access or a RACI role, collect evidence and raise for further investigation.

• refer to: 3623130 - Modeller user able to view folder restricted to admins in SAP Signavio Process Manager
• refer to: My Process Overview (user guide)
• refer to: Limiting access rights to specific Dictionary categories
• refer to: Manage access rights

My Process Overview, Collaboration Hub, role-based visibility, RACI, folder permissions, access groups, restricted folders, process visibility, diagram access denied, feature sets, dictionary categories, role assignment, sensitive processes, process steps visible, permissions enforcement , KBA , BPI-SIG-HUB , SAP Signavio Process Collaboration Hub , Problem