Data ownership functionalities

Completed

Idan Binder

• March 13, 2018 14:58
• Edited

I have discovered a critical problem of data security breach while using the BoYOM system.

 

When viewing the BoYOM's dashboard, I've found out that the plugin completely ignores the build-in SAP "data ownership" configuration and in fact presents the sales people with a complete and comprehensive picture of the company (both on sales and purchasing).

The information presented to sales personnel includes commercial information about customers, other sales people, purchases, and more that are not available to the user when using the original SAP windows users can see only his customer's list and they are unable to view purchasing data.

 

How can I enforce the Buyom plug-in to handle the issue of data ownership (which is now a foundation stone in the SAP system, version 9.2).

 

 For me, it is a very big security breach.

 

Sap: 9.2 PL4
B1 Usability Package: 2017.1.2.0

Vote

1

• Official comment

  

  Yaremi Miranda Lopez

  • March 26, 2018 18:38

  Hello  Idan,

  This is not actually a problem, this is how the Dashboards are designed, I will create this as a Feature Request.
• 

  Scott McClure

  • March 26, 2018 18:45

  Idan,

  We're facing the same thing.  The Open Items is the only real issue but you need to be able to write SQL code to enforce the DO rules - quite possible.  This does mean creating your own dashboards that are then personalized based on $[USER] and publish these for your users.  This is the beauty of how the dashboard is designed, giving you full control of (and responsibility for) the content using SQL queries.

  HTH
• 

  SSP Automation

  • March 26, 2018 18:48

  Thank you for your request.
  The development team have now added it to our internal planning-system for evaluation.
  [Internal Id: 10266]
• 

  Rasmus Jensen

  • February 13, 2019 12:58

  This will be part of B1UP 2019.03 and will be implemented in the following way:

  If enabled the following features will adhere to Data Ownership:
  - Dashboard > Open Items List
  - B1 Search (SQL based searches only)

  Limitations:
  - All features that are based on customizable SQL cannot adhere to Data Ownership unless you add the needed WHERE conditions on your own
  - Lucene based B1 Search can't support the feature due to lack of support in SAP SDK
  - We do not adhere to the shared options.
• 

  SSP Automation

  • February 13, 2019 12:59

  The development team has now completed this request. Expect it to be in the next release of the product. Thank you again for helping us make the product better :-)

Please sign in to leave a comment.