Overview: Users who aren't able to view the users app cannot see what user last updated a record. Instead the source reads "Automated process"
Steps to reproduce:
Login to folio-snapshot
Create a user with all order permissions
Create an order record
Logout and login with new user that only has order permissions
View the order just created
Expand the "Record last updated" accordion
Expected: Record last updated source displays the user name of the user that last updated the order
Actual: Source displays as "Automated process". Even after you edit the record yourself.
Note: this may be a broader problem with significant implications for privacy and security. Potentially the users app could include a specific permission that makes this possible without allowing users to browse user records.
Interested parties: Khalilah Gambrell