Summary:

This is an issue where a person can be assigned to a case that relates to a company they do not have visibility on.

Symptoms:

When a case for a company is assigned to a user that does not have rights to view that company - they cannot see the case.

Resolution:

Workaround:

PLEASE NOTE:
This will only issue a warning if the person and company territory don't match, it does not take into account any other security hierarchy rules. It also does not prevent a user from making any person an assigned user of a case.

Browse to (Secondary Entity)

Administration -> Customisation -> CaseProgress  

Go to ‘Screens’ tab
Go into the ‘Case Progress Screen’
Enter this code into the custom content:

<script>
function checkUserTerr () {

     var companyLookup = function (crmRecord) {

          companyTerr = crmRecord.comp_secterr;
   
          var selectedUser = crm('case_assigneduserid').val();
    
          if (selectedUser+"" != "") {

               crm.sdata({
                    entity: "users",
                    id: crm('case_assigneduserid').val(),
                    success: userLookup 
               });
          }
     }

     var userLookup = function (crmRecord) {

          userTerr = crmRecord.user_primaryterritory;

          if (companyTerr != userTerr) {

               crm('case_assigneduserid').highlight();   
               crm.infoMessage("Warning: User and Company territories do not match."); 
          }
     }

     crm.errorMessage(false); 
     crm('case_assigneduserid').highlight(false); 

     var companyID = crm('case_primarycompanyid').val();

     var companyTerr = "";
     var userTerr = "";

     crm.sdata({
          entity: "company",
          id: companyID,
          success: companyLookup
     });
}
</script>

Also, put this function call into ‘OnChangeScript:’ area of the field
“Case Progress: Assigned To (case_assigneduserid)”
checkUserTerr();

Save.

Status:

This issue is currently with development and will be fixed in a future version of Sage CRM