3663126 - Authorization for sales orders not restrict company code visibility in SAP S/4HANA Cloud Public Edition

To prevent the user from seeing company code &1 when creating a sales order, a display restriction for "company code &1" was added to the user's business role. However, when creating a sales order, the company codes &1 is still visible in the search help.

SAP S/4HANA Cloud Public Edition

1. Go to the "Manage Business Roles" app.
2. Create a custom role.
3. Assign restrictions to the "Company Code".
4. Save the role and assign it to an user.
5. Create a sales order.
6. See that the company code is still visible.

Although restriction fields such as Company Code can be maintained within Business Roles, these restrictions are currently not evaluated at runtime by the Sales Order applications. As a result, maintaining these restrictions does not prevent users from viewing or processing customers in applications such as Create Sales Orders, Manage Sales Orders, or Display Sales Orders.

Currently, the Sales Order applications do not support restricting sales document processing based on Company Code. The same design principle applies to other customer master attributes that are not supported as runtime restriction types for Sales Order applications.

Therefore, this behavior is not caused by an authorization error, incorrect configuration, or a software defect.
In addition, no other authorizations are checked. This means that restrictions based on company code cannot be implemented in the sales order.

Only the following two authorization objects for sales orders can maintain the respective restriction types to limit the processing of sales orders:

• V_VBAK_AAT for sales document types
• V_VBAK_VKO for sales area

In a word, the standard authorization check for sales documents can only base on the sales document type and sales area.
Although restriction types other than sales document type and sales area can be maintained, they do not have an effect when working with the sales apps, as the restriction type in use is related to other business catalogs instead of SD. 

To address the need to block any field other than those two in sales order applications, submit this requirement as a feature request through the Customer Influence Portal under the session SAP S/4HANA Cloud for Sales. 

2963059 - How to Submit Feature Requests for SAP S/4HANA Cloud Product

SAP S/4HANA Cloud Public Edition, Authorization, V_VBAK_AAT, Sales document types, V_VBAK_VKO, Sales area, Company code, Restriction, Business role, Sales order  , KBA , SD-SLS-2CL , Sales (Public Cloud) , Problem