Symptom
When we retrieve the credit card information via /api/travelprofile/v2.0/fop endpoint, the ghost card is transferred to all users with permission, regardless of whether they are guests or regular users.
Example
The Ghost Card MasterCard (XXXX4444) has the option "Allow use of this card by travelers using these Travel Configurations" for the Travel Configuration ABC (123) and the "Guest Travelers Only" selected.The user william.never@abc.com belongs to the ABC(123) Travel Config and is a regular user (non-guest).
When we pull the FOP information for the user via API, the MasterCard (XXXX4444) information will come along in the profile data, even that the user shouldn't be allowed to use this card.
Read more...
Environment
Travel > Profile
Product
Concur Travel all versions
Keywords
When pulling the ghost card via API, the card is coming for all employees even if it's set only for guest travelers (a.k.a non-employees, sponsored guest). , KBA , CON-TRV-ADM-USR-PRO , Profile , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview