Users are able to create new categories and need to block that action - Support and Troubleshooting

Users are able to create new categories and need to block that action Issue Problem Users can create new categories or subcategories in the case view even when they do not have the required roles

Steps to reproduce

1. Open any opened case on sn_customerservice_case.list

2. On the category record, click on the search icon

3. The popup window is opening and the New button is available to the user

4. That New button must not be available as user does not have the require roles to create the category

Release Generic

Cause Root Cause The create access was allowed due to existing ACLs on the system that includes out-of-the-box (OOTB) access with roles catalog_editor, catalog_manager, or catalog_admin.

Resolution Steps to Resolve

1. Identify the generic create ACLs for the sc_category table on the system. - Go to Access Control - Query by sc_category% on the name field - Match with operation = create

2. Be sure the users without permission to create the records meet any of those ACL. The easy way is to check the users do not have any of the roles defined on the ACLs mentioned on Step #1