2268337 - TimeSheet: Workflows are allowing employees to edit admin configurations

Timesheet Enty shows up in wokflows and allows managers to edit the object configurations.

Manager and HR roles are not supposed to be able to edit these objects in a workflow, then they won't be able to edit/change the timesheet data for their employees as well.

In the above image, workflow approver can edit the Employee Time Sheet Entry and also create 'Allowance Type' object due to RBP permissions.

Clicking on Quick card approver is able to edit the Employee Time object.

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

Employee Central

Timesheet

The association "Employee Time Sheet Entry" under Object Definition "Employee Time Sheet" is Editable and Allowance Type permission is provided in Role-based Permission.

Change the visibility of the "Employee Time Sheet Entry" association under "Employee Time Sheet" Object Definition from 'Editable' to 'Not Visible' to resolve this issue.

 And change Role based permssion access on Allowance Type to view only, remove edit option.

Go to "Manage Permission Role" under the "Allowance Type" secured category you have used in its object definition. (Miscellaneous permission should be used generally).

Make sure only view permission is provided for 'Allowance Type" Object.

After the above changes now the workflow will look like below:

KBA , LOD-SF-EC-TIM , Time Off , Problem