SAP Knowledge Base Article - Public

3486696 - How to Restrict field level permissions for getWorkflowPendingData - OData API

Symptom

You are using Function Import "getWorkflowPendingData" to query the pending data in a workflow.

You would like to know whether you can restrict field level permissions for "getWorkflowPendingData".

You tried to disable the field level permission of the API user, but the field still appears in the API response.

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."

Environment

SAP SuccessFactors HCM

  • OData API

Cause

When you configure the workflow, "Respect Permission" should be set to "Yes". Otherwise it will not check the field level permissions.

Pasted image.png

Resolution

Go to "Manage Organization, Pay and Job Structures" -> Find the workflow -> Configure "Respect Permission" to "Yes".

After that, for the initiated workflow, "getWorkflowPendingData" will respect the field level permission of the API user.

If API user does not have permissions for specific fields, those fields should not appear in the API response.

See Also

2316798 - How to restrict API access to specific Employee Central Entities and Fields

Keywords

SF, Success Factors, property, entity, changed, refer, result, response payload, hide, bypass, RBP , KBA , LOD-SF-INT-ODATA , OData API Framework , Problem

Product

SAP SuccessFactors HCM Core 2405