Why can team members whithout the rights to create, modify and delete artifacts move artefacts out of other team areas?

Hi,

we use RRC 4.0.3. But n RRC 4.0.6RC it's the same behaviour.

In the project definition area of a project i define two teams, "Team A" and "Team B". The rights will be pass from the project roles.

"User 1" is part of "Team A" and had the role of an author (create, modify and delete artifacts).

"User 1" is not a member in "Team B" and not a member of the "Project Area". The role "Everybody" has no rights in "Project Area".

Then i create two folders on the same level. The first one has the name "Team A" and the second one has the name "Team B". Inside of the folders are artefacts. "Folder A" is owned of "Team A" (incl. the sub-folders and artefacts). "Folder B" is owned of "Team B" (incl. the sub-folders and artefacts).

Now i log in with "User 1" ("Team A"). I look inside "Folder B" and i can't delete artefacts or modify artifact or create artefacts". That's absolutly it should be. But, "User 1" member of "Team A" with absolutly no rights in "Folder B" or "Team B" can move artefacts out of "Folder B" in "Folder A"!?

Can you explain me why? What is the concept behind?

I have absolutly no permission to create, modify or delete but i can move the artefacts?

I can't explain this behavour my users. When i separate a project in team areas and i don't gave an user the right to create, modify or delete artefacts in an area than i also don't want that the user can move artefacts out this area. Why have everybody the right to move artefacts?

Is there something i do wrong or don't understand?

Please help! Best regards - Marcus