I have a couple issues with a security profile (customer service) we have defined for DMS. This profile is set up that when the document info record is in a "released" status, the customer service person has edit (CV02N) access. When in an "on hold" status, the customer service person does not have edit (CV02N) access. Further, the "Released" status is a "locked" status.
1) The Object links appears to be open for edit, regardless of whether or not we have the status "locked".
Also, the deletion indicator can be changed when in locked status. I am looking for all fields to be locked except for the status field. Customer Service should only be able to change status from "released" to "on hold", and should not be able to change anything else. Any suggestions on how to do this?.
2) The intention is that the customer service person can use CV02N to change a document from "released" status to "on hold". This is the ONLY change customer service should be able to make. However, once the status changes from "released" to "on hold", it seems there is an authorization check missing..... meaning now the customer service person is in "on hold" status and they should not be able to edit anything, but apparently they still have the CV02N access from the "released" status, and they can now also change any other fields, update object links and attachments before they save the document. What am I missing?
Any help would be greatly appreciated!!