SAP Note 22360 - Customer/vendor: 'Display -> Change' authorization

Symptom:

Customer master record data/vendor master record data:
If a user is authorized via authorization object 'Account authorization' (F_KNA1_BED or F_LFA1_BEK) to maintain the company code data maintain but not the general data, he can nevertheless branch from the display transaction to the change mode for the general data using 'Display -> Change'.
Key words: SAPMF02D, FD02, FD03, VD02, VD03, XD02, XD03
SAPMF02K, FK02, FK03, MK02, MK03, XK02, XK03

Cause and prerequisites

Program error

Solution

Corrected in 2.1L, 2.2F and 3.0A.

This correction makes sure that the user can only branch to the change mode if he is authorized for all screens selected on the initial screen of the display transaction.

An interim correction is possible:

a) Customer
SE38 - Change MF02DFB0
FORM BERECHTIGUNGS_PRUEFUNGEN USING B_ACTVT.
...
IF T020-AKTYP NE 'H'
AND KNA1-BEGRU NE SPACE.
AUTHORITY-CHECK OBJECT 'F_KNA1_BED'
ID 'BRGRU' FIELD KNA1-BEGRU
ID 'ACTVT' FIELD B_ACTVT.

IF SY-SUBRC NE 0.

*------- A-Segment ausblenden, andere Bereiche können bearbeitet werden
IF DEBI-XBUKR = 'X' <--- DELETE
OR DEBI-XVKOR = 'X'. <--- DELETE
IF ( DEBI-XBUKR = 'X' <--- INSERT
OR DEBI-XVKOR = 'X' ) <--- INSERT
AND DEBI-XWAEN_PRUEF = SPACE. <--- INSERT
NOBER_KNA1 = 'X'.

b) Vendor:
SE38 - Change MF02KFB0 FORM BERECHTIGUNGS_PRUEFUNGEN USING B_ACTVT.
...
IF T020-AKTYP NE 'H'
AND LFA1-BEGRU NE SPACE.
AUTHORITY-CHECK OBJECT 'F_LFA1_BEK'
ID 'BRGRU' FIELD LFA1-BEGRU
ID 'ACTVT' FIELD B_ACTVT.

IF SY-SUBRC NE 0.

*------- A-Segment ausblenden, andere Bereiche können bearbeitet werden
IF KRED-XBUKR = 'X' <--- DELETE
OR KRED-XEKOR = 'X'. <--- DELETE
IF ( KRED-XBUKR = 'X' <--- INSERT
OR KRED-XEKOR = 'X' ) <--- INSERT
AND KRED-XWAEN_PRUEF = SPACE. <--- INSERT
NOBER_LFA1 = 'X'.

In Release 3.0 the function 'Display -> Change' responds exactly the same way as the change transaction on the initial screen. After an information message, the user can branch to the