My role is an Admin for the account. I have created two territories for my business interest namely 'PH' and 'MY'. I have also created another user and assign it's profile type to be Territorial Admin, a type of profile that I have created specifically for the user, and its Role is a 'Recruiter' and this user will be managing PH territory.

In Role type, Recruiter should not have access to view the admin's Records. However, I have found out that the user is able to view a job that is in the admin's Record, and what's more worrying is the user can take 'actions'.

A candidate owned by the user applied for the job, hence the job appeared on their pipeline view in 'Home', but not in the 'Jobs' module itself. 

Nevertheless, the user is able to click the job from the pipeline view and view the said jobs and take 'actions'.

This includes publishing and unpublishing the job