Access to project profiles: How can we ensure that the current project profile case is not manipulated by someone else without our knowledge?

How can we ensure that the current project profile case is not manipulated by someone else without our knowledge?

The admin of each asset can control which users will be a "contributor" and which users are only on the "watch list". The admin of each asset might be either a project leader or the discipline lead for the asset.

• pForecast is accessible through a web browser. 
• The users need to request access to pForecast via their company IT support. 

Users can be assigned different roles at the corporate level as well as per asset. For each role, there are associated access rights. For an asset, the following roles and their respective access rights are applicable:

1. Administrator:  Allowed to administrate asset, e.g., assign users to roles
2. Contributor:     Allowed to work with forecasts
3. Editor:             Allowed to work with forecasts and flag forecasts for review
4. QC:                 Allowed to work with forecasts, flag forecasts for review, and approve/reject forecasts
5. Subscriber:     Allowed to view forecasts

Figure below shows where the users’ roles can be defined for each asset.