3422501 - Business user can access employee's Compensation File without Compensation work center assigned

Business user can access employee's Compensation File from Time Administration work center without Compensation work center.

SAP Business ByDesign

1. Go to Time administration work center.
2. Go to Employees view.
3. Select any employee and click Edit.
4. Click button "You can Also" -> Open Compensation File.

The business user has been assigned with view Clearing Runs. If the business user has both Time administration work center and Clearing Runs view, it is possible to access employee's Compensation File.

Removing view Clearing Runs will avoid this issue and it can be removed by following methods.

1. Go to Application and User Management work center.
2. Go to Business User View.
3. Select the issued business user and click Edit -> Access Rights.
4. Go to Work Centers and Views Assignment.
5. Click Find and search for Clearing Runs.
6. Uncheck the view.
7. Save and close.

Compensation File, Clearing Runs, unexpected access , KBA , SRD-CC-IAM , Identity & Access Management , Problem