06-15-2011 3:31 PM
Is there anyway to restrict what people see via GOS? I can't see any authorisations behind it except S_OC_ROLE. Seem users can view payroll details of a workflow agent in the workflow logs(view with technical details). Its a wild shot that an end user will find this information in the container tab but it look like a massive security flaw.
I will be interested to know if others have the same problem and how they resolved it.
Thanks
06-16-2011 11:57 AM
06-16-2011 11:24 AM
06-16-2011 11:57 AM
07-01-2011 4:03 PM
This issue relates to authorisations. Depending on infotypes available to the user, they will be able to view data relating to the info type.
I will now have to review all authorisations to ensure there is no unauthorised access.