Employee can see SVS segments they're not authorized for
Summary:
Our organization uses segment value security rules and roles to limit the segments that our employees can see. In the Review Budgetary Control Balances screen when searching a particular budget, this employee can see many segments that they're not authorized for.
Content (please ensure you mask any confidential information):
At our organization:
- Accounting segments use a fund.division.account structure.
- We use two budgets called, "Detail" and a "Control"
- All employees have access to all fund segment values
- All employees have access to division 00000000 and 99999900
- All employees have access to accounts greater than 60000000
When I assign an employee an SVS Rule using the "Starts with" operator in the division segment they are able to see all values in the account segment for that division. This only happens happens when an employee searches the Detail budget on the Review Budgetary Control Balances screen. In the screenshot below you can see on #1 the chosen control budget is the Detail budget. This test user was assigned an SVS role to give them access to all division segments that start with 53, but we found that they are able to see 51 accounts (#2), which should