When viewing the reconcile transactions and disbursements page a user who has a site assigned may see Gateway IDs in the drop-down menu that they should not have access to.
We are currently evaluating this issue and will update this article when we have more information.
Steps to Duplicate
1. Navigate to Administration>Security and select Application user search. 2. Search for a user who has a specific site assigned to their record and to the roles they are a member of. 3. Select the user to go to their application user record. 4. Under tasks select run as user <username>. 5. Now logged in as the user, navigate to the Treasury functional area. 6. Under 'Credit card reconciliation' select 'Reconcile transactions and disbursements'. 7. Click the drop-down for Gateway ID. There may be one or more Gateway IDs showing in the menu that the user does not have site access to via Revenue>Blackbaud Payment Service merchant accounts.