2958717 - User XYZ is Able to Access the Price Lists Which Belongs to Different Sales Organization

User XYZ is able to access the Price Lists which belongs to different Sales Organization because User XYZ doesn't belongs to that Sales Organization which was added to the Price List

SAP Cloud for Customer

1. Log in as User XYZ
2. Go to Products work center
3. Go to Price List view

The cause for the issue is that there are two work center views available forPrice List and Discount list which share the same business object and hence the same access context.

If the access restriction is placed only on Price List Work center view for business role ABC, but there is no access restriction on Read access in Discount Lists. Then this issue could happen.

This is the reason the access restriction is not applied even for Price List.

The same access restrictions need to be applied to both Price and Discount List WoC, for access restrcitions to be effective.

Price List, authorization, Discount list, sales organization , KBA , price list , authorization , sales organization , LOD-CRM-PRC , C4C Pricing , SRD-CC-IAM , Identity & Access Management , Problem