Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Vendor search by matchcode - account group authorisation

Former Member
0 Kudos

We have various vendor account groups including one for paying employee expenses. We are finding that users with access to vendor matchcode search can see vendors for all account groups (including employees) listed in the search even though we have restricted them by authorisation object F_LFA1_GRP to specific groups. Whilst they are not permitted to view full details of the employee the list does show address details. Does anyone know how we can restrict this?

4 REPLIES 4

Bernhard_SAP
Employee
Employee
0 Kudos

HI,

most of the applications have no authorization checks implemented in their matchcode search....

Please refer as example to [SAP Note 639188|https://service.sap.com/sap/support/notes/639188]

I hope, this information helps...

b.rgds, Bernhard

0 Kudos

That's very helpful - many thanks

Former Member
0 Kudos

You can also customize the matchcodes as well so if there is more senstive information on one of the searches then you can have that changed to limit the exposure. Matchcode customizing is found in the IMG - under Financial Accounting \ AR&AP\Vendor Accounts\Master Data\Matchcode.

Former Member
0 Kudos

OSS note 431663 applies