We have several companies in one client. For "Who is Who", the user has a P_ORGIN authorization to read the relevant infotypes. P_ORGIN is restricted to their own Personal Area (which at our site is 1:1 with company).
However, it the same user has read access across personell areas for IT2002, they see all companies in Who is who! As 2002 is not part of the result in who is who, it seems like a bug to me.
Has anyone experienced this behaviour?