cancel
Showing results for 
Search instead for 
Did you mean: 

Customers data restriction access not applying

former_member656863
Participant
720

I am facing an issue while trying to restrict data access (Read/Write) to Customers (Accounts/Ind. Cust.).


Presentation :

  • I’ve created a territory structure LVL1=Country, LVL2=Region, LVL3=Departments (France)
  • In my system, there are several Business Users who have read and write permissions on Customers (Accounts/Ind. Cust.)
  • I have created the Business Role SECRETAIRE_CDO
  • I gave it the access to Customers (Accounts/Ind. Cust.) with the following Access Restrictions :
    • Individual Customers : Read Access (Unrestricted) / Write Access (Restricted) with the Restriction Rule « 3 – Territories ».
    • Same for Accounts
  • Then, I created the Business User TSECRETAIRECDO who’s assigned to the SECRETAIRE_CDO Business Role. Moreover, TSECRETAIRECDO belongs to the territory (LVL3) C.D.O.M.K. 75
  • I also created two individual customers :
    • CustomerTest57 who belongs to the Territory : C.D.O.M.K. 57
    • CustomerTest75 who belongs to the Territory : C.D.O.M.K. 75


Problem Description :

As TSECRETAIRECDO (with territory C.D.O.M.K. 75), I should be able to read information about both individual customers. => OK.

But, I should only be able to modify data about CustomerTest75, and I should not be able to modify information about CustomerTest57.
However, TSECRETAIRECDO can also modify data about CustomerTest57.

I did the same test scenario with Accounts and it's the same behavior.

Am I missing a step during the Access Restriction process?

View Entire Topic
palu
Product and Topic Expert
Product and Topic Expert
0 Kudos

Hi Khin,

1. Sometimes, the access assigned to the user via business roles would not have updated. Kindly navigate to Administrator -> Business Users -> Edit Access Rights to check, Whether the restricted access was applied to the Particular work center view.

2. If two work center views are sharing same UI Component and if you have given Unrestricted Writer access to one view and Restricted write access to another view, Unrestricted write access will be applied to all the views. Kindly provide restricted write access to all the views in the Customer work center and try once.

3. Kindly provide the details on how you have assigned the territory (LVL3) C.D.O.M.K.75 to the user TSECRETAIRECDO.

Regards,

Palani.

former_member656863
Participant
0 Kudos

Hi,

Thank you for your time, much appreciated!

I attached some screenshots to answer your 2 first questions.
Concernerning the 3 point, I assigned my users through Sales>Territories with the standard Role (screens attached as well).

1. SCDO57 > the Admin user who's assigned Territory 57, he will create the Customer later on and assign that customer to his Territory 57.


2.SCDO75 > the TSECRETAIRECDO who's assigned Territoy 75.

former_member656863
Participant
0 Kudos

3. CustCDO57 > the Customer created by Admin (57).


4. SCustCDO57 > the Customer created by Admin (57), opened from TSECRETAIRECDO (75) in anonymous window. She can still modify the Customer's data

former_member656863
Participant
0 Kudos

5. ARSecretary1 > Access Rights check 1


6. ARSecretary2 > Access Rights check 2 > Same for Accounts WoCView

former_member656863
Participant
0 Kudos

7. ARSecretary3 > Both Accounts and Ind. Cust. have only Territory 75 and 91 (former assignment, but it should affect access restriction to Customers with Territory 57...) checked

Did I miss a step?