11-13-2011 6:00 AM
I have gone through the most of the sdn link..but did't find the correct solution for the same...
we want to suppress the access to some vendor accounts, which can be shown with transaction (XK03 or fk02) for example.
There is an authorization object F_LFA1_BEK, which can be maintained in the special vendor accounts in field authorization group.
A user with authorization for vendor account with authorization group ZZZZ in it can see all vendors with authorization group ZZZZ and all vendors with no authorization group. But he can't see vendor accounts with authorization group YYYY. To this point, it's ok.
If the user uses the F4 search help he is able to see the vendor accounts with authorization group YYYY too. And this is the problem - the user should not see these vendor accounts. With this option user is able to see address data of a vendor account he should not see.
please check?
11-13-2011 7:41 AM
This is generally the case with all search helps.
You cannot see details such as payment data, but you can see the existence of the master record.
If you check OSS notes for the name of the search help, you will find some recent options to add the checks.
Cheers,
Julius