Symptom
Delete option is visible for attachment on MDF Portlet when permissions are restricted to the user for this action
Environment
SAP SuccessFactors HXM Suite
Reproducing the Issue
1. Go to Employee Profile
2. Go to the MDF portlet > Edit
3. Delete Option is available on attachment field for users without Delete permission
Cause
In the current system design, there is no specific permission on the attachment field which can restrict it from deletion.
Resolution
As a workaround, You can make a field readOnly or Not visible to a certain permission group using the field level override but there is no setting to restrict the deletion of an attachment.
See Also
2094229 - Field Level Overrides Permission for MDF objects - Metadata Framework
Keywords
Custom MDF, MDF Attachments, Field Level Overrides, Delete, Role Based Permission MDF, INC2105198 , KBA , LOD-SF-MDF-RBP , RBP Permissions on Objects , Problem