SAP Knowledge Base Article - Public

3357989 - Field level permission behaviour for a new approver added via Manage Workflow Request Page

Symptom

  • When employee creates the workflow request and when we add new approver in Manage Workflow Request, the new approver is getting access to the restricted fields which user ( new approver ) should not have access.

Environment

SAP SuccessFactors HXM Core

Reproducing the Issue

  • Create any workflow request for the test user -> Go to Manage Workflow Request -> Select the request and add one approver Ex: Manager B
  • Go to proxy now -> Proxy the manager -> Workflow request will be there and same will be approved. 
  • Manger A and Manger B has same roles to perform. Issue is here when new approver (Manger B ) is added, proxied as Manger B and goes to workflow approval, the manager/ approver can see the restricted fields

Cause

This is working as designed.

Resolution

Currently if you add/insert a workflow step from manage workflow request page, the approver on that new step will even see the pending data to which user has no permission to since we will always give respectRBP to false for newly added step approver.

With adding step, we can't solve this issue. But customer could re-configure their workflow FO with that new step and give respectRBP to true on that step.

After that, new workflow triggered with this changed FO can have the expected behaviour of respectRBP.

Keywords

Workflow request, workflow , resignation, approver, RBP, new approver , new step, manager , KBA , LOD-SF-MDF-WFL , Custom Object based Workflows , Problem

Product

SAP SuccessFactors HXM Core 2305