How can a userA view userB's timesheet when userA is not supposed to have the ability to view the timesheet? One user sees other timesheets that are not there own along with her timesheet when they enters the timesheet module.
This is due to the userA having rights over userB either from a global, OBS, or instance level.
Sequentially check the rights setup as noted below. If any rights are removed/changed, note that the user may need to log out and log back in for rights to refresh.
1. Check if UserA has the following global rights:
a. Global right(Timesheets - Navigate)
b. Global right(Timesheet - Approve - All)
2. Check if UserA has instance right(Resource - Enter Time) for UserB
3. Check if the user has access at the OBS Level:
KB 104080 - Clarity PPM: Best Practices on Rights Management