05-14-2008 9:32 AM
We have various vendor account groups including one for paying employee expenses. We are finding that users with access to vendor matchcode search can see vendors for all account groups (including employees) listed in the search even though we have restricted them by authorisation object F_LFA1_GRP to specific groups. Whilst they are not permitted to view full details of the employee the list does show address details. Does anyone know how we can restrict this?
05-14-2008 9:50 AM
HI,
most of the applications have no authorization checks implemented in their matchcode search....
Please refer as example to [SAP Note 639188|https://service.sap.com/sap/support/notes/639188]
I hope, this information helps...
b.rgds, Bernhard
05-14-2008 10:08 AM
05-14-2008 1:30 PM
You can also customize the matchcodes as well so if there is more senstive information on one of the searches then you can have that changed to limit the exposure. Matchcode customizing is found in the IMG - under Financial Accounting \ AR&AP\Vendor Accounts\Master Data\Matchcode.
08-08-2008 9:43 AM