Employee data violation by unauthorized user ?

Hello,

I would like to establish who has assigned an incorrect position to employee.

I went to Employees form (PERWSEMP), query for pearson e.g. 'X' and found that someone assigned an incorrect position to him. I checked the record history and found that data was updated lately by user e.g. 'Y'.

The problem is that user 'Y' does not have access to Employees form (PERWSEMP) from responisbilities that he owns, so how could he done this ?