SAP Knowledge Base Article - Public

2859640 - Permissions Issues with MDF Objects Since b1911 Release

Symptom

Post b1911 release there has been a series of issues with permissions pertaining to MDF objects/ features such as EC specific feature: Time Off, Global Benefits and Advances and Deductions along with impacting non-EC features such as Custom MDF portlets.

Environment

SAP SuccessFactors Employee Central

Reproducing the Issue

Example Issues with Time Off:

Error "Sorry, you are not authorised to open this" while requesting leave

  • Navigate to Employee's ESS Time off.
  • Click on 'New Absence'.
  • An Error Occurs : "Sorry, you are not authorised to open this".

No button to create absence

  • Navigate to Employee's ESS Time off.
  • No button to create absence.

Cause

  • This is as per the new enhancement MDF-31287: Non-Secured objects can be accessed without permission "Access to Non-Secured objects".
    Please review the following KBA for further information on this enhancement: 2865500 - Able to Edit Non-secured MDF Objects without Permissions
  • Objects which are not secured, cannot be accessed without providing the permission "Access to Non-Secured objects".

Resolution

  1. Navigate to Manage Permission role.
  2. Open the permission role that the employee belongs to.
  3. Click on the link 'Metadata Framework'.
  4. Provide the permission "Access to non-secured objects" > Save.

NOTE:

  • There is an opt-out feature in the Upgrade Center i.e customer can decide to opt-out if they find this new behavior is not suitable. 
  • The name of the opt-out feature is "Continue to Allow Users Access to Non-Secured Objects without Permissions being Assigned".
  • Do note that, it is recommended to not opt out and adjust the RBP roles so the access is restricted to specific people.

Keywords

Time off, Sorry, you are not authorised to open this, ESS, Leave request, Create absence, Access to non-secured objects, MDF-31287, Continue to Allow Users Access to Non-Secured Objects without Permissions being Assigned, RBP, Metadata Framework, Sorry, you aren't authorized to open this, payment information, global benefits, benefits, advances, deductions, 1911, b1911, new absence button missing, button missing , KBA , LOD-SF-EC-MDF , MDF & EC2MDF Migration , LOD-SF-EC-TIM , Time Off , LOD-SF-EC-GBF , Global Benefits , LOD-SF-EC-ADV , Advances , Problem

Product

SAP SuccessFactors Employee Central all versions ; SAP SuccessFactors HXM Core 1911