I want to restrict access to certain SAP accounts/documents.
I've created an authorization group and assigned this to the user authorization profiles
*GL - i've assigned this authorization group to the GL master.
When the user post/change/display documents the authorization is checked. When the user does not have the authorization group in the user role/profile, he cannot display line items for this account via transaction FBL3N.
* I've also assigned this authorization group to the vendor master and reconciliation account
When the user post/change/display documents the authorizatiuon is checked but the user can display line items via transaction FBL1N/FBL5N even when he does not have authorization to do so. Only when he double click on a document no, does the error message display to notify him that he does not have the required authorization to display items.