We have a long standing issue whereby when certain records in Purchase Orders are created or cloned (the issue is not related solely to cloning), the record´s ownership changes randomly to another user different to the person who creates the record.
This behavior is inconsistent, and more perplexing is the fact that the users do not have permission to change the record's owner, nor editing the record altogether. They can create but not edit the records.
When the record is saved this happens:
1. The record's createdby field and timestamp is assigned properly, according to the user who created the record.
2. The record's ownership field is assigned incorrectly to another random user.
3. The record is never modified by any user since they do not have permissions
4. The do not have permissions to change the ownership field, nor edit the record, nor change the records' ownership through massive updates.
5. Even if they had permissions to edit the records, it is verified they didn't change them as the "created by" and "modified by" timestamps are identical.
We are willing to demonstrate the issue to Zoho any time you wish. It's critical that these fields do not change randomly as it creates a huge security issue.
Thanks for prompt response to this issue.