3532504 - Public Profile can be accessed by Proxy users without Employee Profile rights.

Public Profile can be accessed by a proxy user despite not being granted Employee Profile rights in Proxy Management.

SAP SuccessFactors HCM

1. Go to Proxy Management
2. Assign User A to Proxy as User B with rights to modules such as Reporting or Recruiting. 
3. Proxy as User B. 
4. Hit the Profile icon in the top right corner. 
5. Hit "Public Profile". 
6. Profile info can be seen and some fields (e.g. description/profile pic) can even be changed even if the full profile can't be accessed. 

Expected behaviour. 

After a thorough investigation, Engineering and Product Management confirmed this is expected behaviour. 

• 2704750 - Missing proxy permission | Employee Import resetting proxy assignments - BizX Platform

SuccessFactors, BizX, Proxy, Proxy Management, Grant, Granted, Rights, Modules, Public Profile.  , KBA , LOD-SF-PLT-PRX , Proxy , Bug Filed