Solution : https://service.sap.com/sap/support/notes/1262016 (SAP Service marketplace login required)
Key words :
control user rights, information disclosure due, terms c_apo_cvc reason, missing authorization checks, authorization object, authorization check, implementing note 1235367, cvc maintenance, apo transactions, prerequisites note 1235367
Related Notes :
| 1306604 | /SAPAPO/MC62 authorization for creating CVCs |
| 1235367 | Missing authority check in APO transaction. |
| 888889 | Automatic checks for security notes using RSECNOTE |