See SAP Note 2513585 – Potential DDIC objects and data loss during upgrades to NetWeaver
SAP Note 2766198 – SAP_WFRT Authorization Issues With Custom Logic. Also see https://blogs.sap.com/2021/02/10/how-to-make-access-control-in-abap-cds./
A priority ‘Very High’ SAP Note/KBA has just been released on component CRM-ANA-PS