Site Security is not being respected when searching for Batches, allowing any batch to be run for the Credit Card Processing.
We are currently evaluating this issue for a fix in a future service pack.
Steps to Duplicate
1. Click Administration Tab 2. Click Security 3. Click Application Users 4. Search for testing user 5. Insure that test user has site security 6. Run as User 7. Click Revenue Tab 8. Click Batch entry 9. Search for Batch that does not have site for specific user 10. Note that Site Security works and does not show batch 11. Click Revenue Tab 12. Click Batch Search 13. Search for Batch found previously 14. Batch is viewable and can click on it 15. Back to Revenue Tab 16. Click EFT 17. Click credit card processing 18. Click Credit Card Processing to use 19. Click Start process 20. Search for batch found previously 21. Start process on batch found previously