Symptom
End user set "Specify target population for other objects" in Manage Permission Roles, but still was able to export all data.
*Image/data in this KBA is from SAP Internal Systems, sample data, or Demo Systems. Any resemblance to real data is purely coincidental.*
Environment
SAP SuccessFactors Employee Central - Metadata Framework
Reproducing the Issue
- Set or enable the following permission in RBP
- MDF Foundation Objects (Configure Object Definitions, Manage Data, Import Permission on Metadata Framework, Manage Configuration UI, Manage Positions, Manage Mass Change for Metadata Objects, Manage Sequence)
- MDF Foundation Objects (Select an Object to limit the data to export)
- Specify the target population for other objects in Manage Permission Role
- MDF Foundation Objects (Configure Object Definitions, Manage Data, Import Permission on Metadata Framework, Manage Configuration UI, Manage Positions, Manage Mass Change for Metadata Objects, Manage Sequence)
- This will limit what is displayed in Cost Center, within the said Legal Entity.
- However, exported data from Import and Export Data, contains all Cost Centers.
Cause
MDF Import/Export was designed for IT/HR Admin user to do massive data upload/download at the beginning.
So it do not have fine granular permission control.
Resolution
Using oData API would be an alternative.
Keywords
KBA , LOD-SF-EC-RBP , Roles & Permissions (EC Core only) , Problem
Product
SAP SuccessFactors HCM Core all versions