Why do you need this change?
Users exporting ACH payment files currently require Modify permission on the Bank Account table only to update internal technical fields. This requires organizations to grant unnecessary write access to sensitive Bank Account master data, preventing implementation of the principle of least privilege. We would like to remove this permission requirement while preserving the current functionality.
Describe the request
Please add the required Modify permission on Bank Account to Codeunit 10094 "Export EFT (ACH)" so that permission sets can grant IndirectModify instead of Modify on the Bank Account (270) table. This would preserve the current functionality while allowing administrators to follow the principle of least privilege.
Why do you need this change?
Users exporting ACH payment files currently require Modify permission on the Bank Account table only to update internal technical fields. This requires organizations to grant unnecessary write access to sensitive Bank Account master data, preventing implementation of the principle of least privilege. We would like to remove this permission requirement while preserving the current functionality.
Describe the request
Please add the required Modify permission on Bank Account to Codeunit 10094 "Export EFT (ACH)" so that permission sets can grant IndirectModify instead of Modify on the Bank Account (270) table. This would preserve the current functionality while allowing administrators to follow the principle of least privilege.