SAP Knowledge Base Article - Public

2790806 - User can see Sales Orders Even Though the Access is Restricted to a Particular Sales Unit

Symptom

You restricted the access for user ABC for the Sales Orders view to Sales Unit XYZ for read and write access (XYZ represents the Sales Unit ID).

However, user ABC can see not only Sales Orders with Sales Unit XYZ.

Environment

SAP Business ByDesign

Reproducing the Issue

Logon to the system with user ABC (ABC represents the name of the business user).

  1. Go to the Sales Orders work center.
  2. Select the Sales Orders view.
  3. Select All Sales Orders
  4. Click on the Click here to execute the query hyperlink.
  5. You notice that user ABC can see Sales Orders with Sales Unit XYZ and also other Sales Orders with no Sales Unit assignment.

Cause

The Sales Orders the user can see do not have any Sales Unit assigned.

Resolution

If you set an Access Restriction using a specific Access Group and the respective document or master data set does not have any value in the Access Group every user can see the document or master data set.

For example in your case for a Sales Order you set a restriction for user ABC on the Sales Unit XYZ and in a Sales Order no organization is maintained every user will be able to see this Sales Order.

Keywords

Access; Restricted; Organization; Sales Unit; Employee Responsible; Sales Order; , KBA , AP-SLO-SO , Sales Order , Problem

Product

SAP Business ByDesign all versions