I have a situation, where one of the user been able to change/update the Outbound delivery for other location or plant.
Here is the situation :
User A is located in North America and he has been assigned with North America plants/CC/Shipping points.
We had been reported that User A updated Outbound deliver "12345678" which belongs to Indian plant. We checked and found that roles are already restricted at shipping point, plant and company code level. And at Org level he didn't have Indian plant at all. But still he "User A" were able to update deliver which belongs to Indian plant.
I understand that, Each delivery been assigned to respective plant and all data stored at LIKP table.
My question is, there is any way to have restriction around this and prevent user not to perfom such acivity in SAP system if they don't have plant number been assigned at org level.