SAP Knowledge Base Article - Public

2739174 - Unable to Restrict Accounts from Showing in All Accounts View Even If There is no Read/Write Access Restrictions

Symptom

You have not provided the Read/Write access for Accounts to the Business User. Your requirement is to restrict the Accounts from appearing in the All Accounts view in Account Management work center. But the user is still able to see all the Accounts using the query All Accounts.

Environment

SAP Business ByDesign

Reproducing the Issue

Assigned Access Restrictions to User:

  1. Go to the Application and User Management work center.
  2. Go to the User and Access Management view.
  3. Go to the Business Users subview.
  4. Search for the User.
  5. Select Edit-> Access Rights.
  6. In Business Role Assignment tab, Business Role is not assigned.
  7. In the Access Restrictions, for BPM_ACCOUNTS, for the Accounts view, assign as below:
  • Access Context: 1010 – Employee.
  • Read Access: Restricted.
  • Write Access: Restricted.


When the Business User checks the Accounts:

  1. Go to the Account Management work center.
  2. Go to the Accounts view.
  3. Show All Accounts.
  4. Able to see all the Accounts.

Cause

The work center PDI_PARTNER_DEVELOPMENT and all the views in it are assigned to the Business User. Hence, when these views are assigned, it will give unrestricted access for all the views assigned to the user.

Resolution

Unassign the work center PDI_PARTNER_DEVELOPMENT to make the restrictions work.

Keywords

PDI_PARTNER_DEVELOPMENT, Access restrictions, All Accounts , KBA , 1010 – employee , bpm_accounts , SRD-CC-IAM , Identity & Access Management , Problem

Product

SAP Business ByDesign all versions