3498194 - User Who Has No Write Access To Bank Directory View Can Modify The Value

The user ABC who has Restricted or Unrestricted write access to Suppliers can modify the supplier Bank Directory data, even if there is no write access to Bank Directory view (ABC represents the user ID).

SAP Business ByDesign

1. Go to Application and User Management work center.
2. Go to Business Users view.
3. Search for user ID ABC.
4. Click Edit , Access Rights.
5. Navigate to Access Restrictions tab.
6. See that user ABC has Restricted or Unrestricted write access to Suppliers view and has no write access to Bank Directory view.

 Then,

1. Log on with user ABC.
2. Go to Supplier Base work center.
3. Go to Suppliers view.
4. Select any supplier and click on Edit-Financial Data.
5. Under Bank Data subtab, double click on the bank ID.
6. In the Bank Directory Entry view, it is possible to edit the bank information.

The behavior occurs when the Supplier Bank Details authorization is still assigned to the business user through the relevant business role and work center and view assignment settings.

To verify this, navigate to Application and User Management and check whether the Supplier Bank Details authorization has been removed from the relevant business user's access rights and business role assignments.

If the authorization is assigned (checkbox selected), the user is allowed to maintain and edit supplier bank details. If the authorization is not assigned (checkbox cleared), the user is not allowed to edit supplier bank details.

Option 1: Verify Access Rights Through Work Center and View Assignment

1. Go to Application and User Management work center.
2. Navigate to the Business Users view.
3. Select the relevant business user.
4. Choose Edit , Access Rights.
5. Open the Work Center and View Assignment subview.
6. select the relevant work center, such as Supplier Base.
7. Expand the available views and select Supplier Bank Details.
8. Check the Assigned to User checkbox status:
   - If the checkbox is selected, the user is authorized to edit supplier bank details.
   - If the checkbox is cleared, the user is not authorized to edit supplier bank details.

If the Assigned to User checkbox is greyed out or cannot be modified in the Work Center and View Assignment view, follow option 2.

Option 2: Verify Access Through Business Role Assignment

1. Go to Application and User Management work center.
2. Navigate to the Business Users view.
3. Select the relevant business user.
4. Choose Edit , Access Rights.
5. Open the Business Role Assignment view.
6. Identify and select the business role that should be reviewed.
7. Open the business role and choose View All.
8. Navigate to Work Center and View Assignment within the business role.
9. select the Supplier Base work center.
10. Find the Supplier Bank Details authorization.
11. Review the assignment:
    - If the checkbox is selected, the business role grants authorization to edit supplier bank details.
    - If the checkbox is cleared, the business role does not grant authorization to edit supplier bank details.

After adjusting the authorization settings as required, the system behavior will align with the configured access restrictions.

Bank Directory, Write Access, Supplier Base , KBA , AP-PAY , Payment Processing , Product Enhancement