3498194 - User Who Has No Write Access To Bank Directory View Can Modify The Value

The user ABC who has Restricted or Unrestricted write access to Suppliers can modify the supplier Bank Directory data, even if he has no write access to Bank Directory view (ABC represents the user ID).

SAP Business ByDesign

1. Go to Application and User Management work center.
2. Go to Business Users view.
3. Search for user ID ABC.
4. Click Edit->Access Rights.
5. Navigate to Access Restrictions tab.
6. See that user ABC has Restricted or Unrestricted write access to Suppliers view and has no write access to Bank Directory view.

 Then,

1. Log on with user ABC.
2. Go to Supplier Base work center.
3. Go to Suppliers view.
4. Select any supplier and click on Edit-Financial Data.
5. Under Bank Data subtab, double click on the bank ID.
6. In the Bank Directory Entry view, it is possible to edit the bank information.

This is a known issue and development team will fix it in the future release.

Bank Directory, Write Access, Supplier Base , KBA , AP-PAY , Payment Processing , Product Enhancement