Why a Contract Team Member Can View and Edit Contracts Created by Others?

Summary:

We are trying to demo the contract role-based access to our clients but meet the problem:

A user is created with the following roles:

"Application Implementation Manager "

"Application Implementation Administrator "

"Business Practices Director "

"Application Diagnostics Administrator "

"Application Implementation Consultant "

"Employee "

"Enterprise Contract Team Member "

He is not identified as a resource, so this user can't create a new contract.

But this user can view and edit contracts created by others.

Why could he do this? He doesn't have Enterprise Contract Administrator or Manager role. He is not added as a contact on the Contract Parties, neither.

Content (please ensure you mask any confidential information):