3768327 - Unexpected Create/Update Permission for App F1602 (Manage Product Master Data)

In app Manage Product Master Data (F1602), users assigned with the business role (SAP_BR_PRODN_PLNR) or a custom copy (for example ZS_BR_PRODN_PLNR) can unexpectedly create or update products even without a role that explicitly grants access to app F1602.

The unexpected write ability disappears after setting the role’s Access Categories (Write, Read, Value Help) to Restricted or setting Write to No Access, indicating the behavior is tied to default Unrestricted permissions.

The question arises whether it is normal to have to restrict a business role that should not have access to this app.

"Image / Data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental"

SAP S/4HANA Cloud Public Edition

F1602, manage product master data, unexpected authorization, unintended write access, create update without role, business role restrictions, access categories, No Access, SAP_CMD_BC_PRODUCT_DSP_PC, display catalog, IAM, public cloud, authorization variants, restrict write, product master permissions , KBA , LO-MD-MM-2CL , Product Master for Public Cloud , Problem