SAP Accounting Consulting

Symptom

A user has been given authorization to access Business Partners of certain authorization group. The Business Partner search help BUPAGUID displays all the Business Partners even if they belong to authorization group for which the user does not have authorization.
Ex: User X is configured to access Business Partners of authorization group ‘0001′. The authorization configuration is done using authorization object B_BUPA_GRP.
BP: 123 belongs to authorization group ‘0001′.
BP: 456 belongs to authorization group ‘0002′.
Ideally X has access to only 123 and not 456.
But still X can view both 123 and 456 using search help BUPAGUID.
Other terms

BUPAGUID, B_BUPA_GRP, BUP_SHLP_EXIT_SEVERALS, perform search_partner_bupaguid, LBUD1F06, Partner by Technical GUID, Business Partner search, BUT000-AUGRP
Reason and Prerequisites

There was no search help exit available for the search help BUPAGUID. There was no check on BUT000-AUGRP. The search help exit BUP_SHLP_EXIT_SEVERALS is enhanced so that it handles B_BUPA_GRP configuration too.
Solution

Implement the note.

————————————————————————
|Manual Pre-Implement. |
————————————————————————
|VALID FOR |
|Software Component SAP_ABA SAP Application…|
| Release 700 All Support Package Levels |
————————————————————————
1. Transaction SE11
2. Choose option Search help
3. Enter search help name BUPAGUID and click ‘change’
4. Under tab ‘Definition’, enter Search help exit as BUP_SHLP_EXIT_SEVERALS’
5. Save and activate