3549822 - After restricting plants in "Maintain Business Roles" app, it still is possible to visualize/swap plants when creating a new Sales Order

Even after restricting Plants in the "Maintain Business Roles" app, when creating a Sales Order, the user is still able to view/swap plants.

SAP S/4HANA Cloud Public Edition

1. Go to "Maintain Business roles"
2. Search for your CB User
3. Go to "Business catalogs" and there select the Sales - Sales Order Processing - SAP_SD_BC_SO_PROC_MC
4. Click in "Restrictions types" and search for "Plant", you can see how the table looks below.
    

   Restriction Type	Write	Read	Value Help	Restriction Type Status	Field Name	Field Description

   Plant

   WERKS

   Plant

     
5. Now, even if you restrict the "Plant" field, from the Sales and Distribution perspective, the information from the field WERKS will still be available,

The CDS for plant search help is C_SalesDocumentItemPlantVH, it is with @AccessControl.authorizationCheck: #NOT_REQUIRED, this means there is no authorization check on the search help, in this case, the intersection of below two sets will return:

• The plant of the material (stored in the field name MARC) 
• Allowed plant of the sales area (stored in the field name TVKWZ)

This is why, even after restricting the field in the steps above, when you create a new Sales Order, other plants will show in the search help and you will be able to swap the plant as well.

At the moment, this is considered a new feature request.

Submit this requirement as a feature request through the Customer Influence Portal under the session SAP S/4HANA Cloud for Sales.

• KBA 2963059 - How to Submit Feature Requests for SAP S/4HANA Cloud Product

plant, sales, restriction, access, swap, view, Sales Order,  , KBA , SD-SLS-SO-MO-2CL , Make-to-order, assembly order (Public Cloud) , Problem