Symptom
User is able to modify "Open and Close Periods" even though no write access is provided for the relevant work center and assigned companies.
Reproducing the Issue
- Go to Application and User Management Work Center
- Go to Business Users View
- Search for the affected User ID.
- Select Edit Access Rights.
- Go to Access Restrictions Tab.
- Remove Write access for the General Ledger Work Center across all views.
- Log in with the same user and observe that the user can still edit "Open and Close Periods".
Cause
The user has "Unrestricted" Read Access and "No Access" Write Access assigned under company-level access. However, no Organizational Assignment has been maintained for this user.
Resolution
Maintain the Organizational Unit and Company for the user to ensure that the system applies the correct restrictions.
Note: If any company level restrictions are applied to any user, then the Organizational Unit and company should be maintained, only then the restrictions will apply to the particular work centers.
Keywords
open and close periods, access rights, general ledger, unrestricted read access, no write access, company, organizational unit, sap business bydesign , KBA , SRD-CC-IAM , Identity & Access Management , Problem
SAP Knowledge Base Article - Public