Symptom
Restriction type Q_QMEL is introduced into the system with CE2608 release and the restriction has been set on the business role.
However, when creating/changing quality notification, no authorization check is triggered.
Environment
SAP S/4HANA Cloud Public Edition
Reproducing the Issue
- In Maintain Business Roles, create or copy a business role that includes access to transaction IQS12_TRAN and the restriction type Q_QMEL (Quality Notification Types).
- Maintain Q_QMEL by restricting it to a specific quality notification type.
- Assign the business role to a user.
- Launch the application to create a Quality Notification.
- Observe that the user can still create Quality Notifications for notification types other than the restricted type.
Cause
The restriction type Q_QMEL has been introduced for transaction IQS12_TRAN with release 2608, but it is still in "Phase-In" mode. This is a transition period during which it is possible for users to maintain the restriction in the corresponding business roles, but the check itself is not yet enforced.
Resolution
The "Phase-In" flag is planned to be removed in release 2702. After that, the restriction type Q_QMEL will work as expected.
See Also
Keywords
Q_QMEL, IQS12_TRAN, restriction type, authorization restriction, quality notification, notification type, not enforced, phase-in, 2608, 2702, Maintain Business Roles, IAM , KBA , QM-QN-2CL , Quality Notifications (Public Cloud) , Problem
SAP Knowledge Base Article - Public