Symptom
You have noticed that employees have permission to edit certain MDF objects like Department, Business Unit or Country but you would like to restrict this permission to avoid changes that might cause errors.
"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."
Environment
SAP SuccessFactors Employee Central (EC) - All Versions
Reproducing the Issue
- Go to manage data;
- Select the object that you should not have access;
- See that the object can be edited;
OR
- Go to manage data;
- Select an object for example legal entity;
- See that legal entity uses another object for country;
- Click on the card to see the country;
- See that you have permissions to edit the object country
Cause
Missing Security configuration for the MDF object under Object Definitions
Resolution
- Go to configure object definitions and select the object that you should not have access to edit;
- Click on Take Action> Make Correction;
- Scroll down until you reach the security session;
- In that session you need to select the following:
- Secured: Yes;
- Permission Category: Miscellaneous Permissions
IMPORTANT NOTE: As soon as you set this and save, all the users will lost access to this object so you must go to manage permission roles and give the permission under Miscellaneous Permissions for that objects for the role you desire.
Once editing Object Definitions, please check permission on Access to non-secured objects (previously known as 'Read/Write Permission on Metadata Framework'). the system will behave as following considering the Secured Objects and this permissions:
- If this permission is not granted, on manage data user will be able to see only objects which are marked as Secured='Yes' and user has access.
- If this permission is granted, user will get access to all objects which are marked as 'Secured='No' and the secured objects on which user has access.
Keywords
KBA , LOD-SF-EC-RBP , Roles & Permissions (EC Core only) , LOD-SF-EC-FOO , Foundation Objects (Organisation, Pay and Job Structures) , How To