SAP Knowledge Base Article - Public

2985523 - User Is Able To Create Documents In Offline Mode Which They Don't Have Permission

Symptom

You are able to create documents (e.g. Accounts, Sales Quotes, Tickets) in the mobile offline mode, even though the user permissions is set to prevent the creation of such documents.

Environment

SAP Cloud For Customer

Reproducing the Issue

  1. Log in with the user in the mobile app.
  2. Synchronize data to the device.
  3. Go to offline mode.
  4. Click on Create button.
  5. Create any document that user wouldn't have permission to.
  6. Save is permitted in offline.

Cause

The validation of user permissions is done only at synchronization of data from offline to online.

Resolution

The validation of user permissions is done only at synchronization of data from offline to online, hence the user will be able to create the documents freely while at offline mode, but they will never be able to synchronize them to online mode.

If the user attempt to synchronize data to online which they don't have permission, message "You are not authorized to perform this action" will be triggered in Upload Sync Log and data won't be sent to online.

Keywords

Document, Permissions, Offline, Mobile, App, Windows, iPhone, Android, iOS , KBA , AP-RC-MOB-OFL-SYN , Offline Data Synchronization , How To

Product

SAP Cloud for Customer add-ins all versions ; SAP Cloud for Customer core applications all versions