Authorization to display a template.

I have a project template for which the template responsible can maintain a list of users that shall be able to read it (tab "Authorizations").

However, this does not seem to be enough for a user to read a template.

If the user does not have any special profile, he/she is not able to read.

If he/she has a profile which includes the authorization object CPRO_DPT with activities 02 or 03, he/she is able to read ALL templates, also the templates for which they are not authorized.

So, CPRO_DPT seems to be too global. Is there any other profile/role that is needed?