3720647 - unauthorized pages visible due to identical apps in fiori spaces and pages

Fiori Spaces & Pages are configured to separate content for user “A” and user “B”.

Within the same space, two different pages are defined:

Page “X” assigned only to role “R1” (for user “A”)

Page “Y” assigned only to role “R2” (for user “B”)

Each page is linked to a separate Business catalog, and the catalogs are authorized only in their respective roles. However, the same app “Z” is authorized in both roles (via the Technical catalog).

Despite this setup, user “B” (with role “R2” only) can see not only page “Y” but also page “X”, including app “Z”.

SAP S/4HANA

fiori spaces, fiori pages, unauthorized pages, app visibility, role-based authorization, technical catalog, business catalog, employee self-services, manager self-services, page separation, fiori launchpad , KBA , CA-FLP-FE-UI , SAP Fiori Launchpad User Interface , Problem