I have an issue where an employee of company code X can view billing documents of company code Y in transaction EA05. This should not be the case. Employees of company code X should only see billing documents og company X. I have checked the authorisation objects related to EA05 and they have been maintained correctly. Also the program(for EA05) which displays the document does not have check on company code authorisation.
Does anyone has any idea on how we can have this check on company code. Or do we have to write a code in the program for the check?
Thanks in advance.