Symptom
In the 2505 release, with the latest form experience enabled, users can delete attachments uploaded by others even if edit permission is not granted.
Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.
Environment
SAP SuccessFactors Performance Management
Reproducing the Issue
- Enable the Latest experience of Performance Management forms in Performance Management Feature settings.
- In the performance form template, check that the edit attachment permission is disabled for a specific role, for example, EM.
- Launch a new performance form.
- In the employee step, upload an attachment.
- Send to the manager step.
- The manager could delete the employee's attachment.
Cause
This is a Known issue.
This issue occurs when the Latest experience of Performance Management forms is enabled in Performance Management Feature settings.
Resolution
The fix for this issue is planned to be deployed with the patch M2504p3 on 27-Apr-2025.
For patch timelines, please review SAP SuccessFactors Patches Knowledge Base.
Workaround
Disable Latest Experience of Performance Management Form.
See Also
- SAP SuccessFactors Product Release & Road Map Information
- SAP SuccessFactors Patches Knowledge Base
- KB Article 2171560 - How to be notified of new or updated SAP Notes or KBAs
- Configuring Permissions for Attachments | SAP Help Portal
Keywords
KI2505, PMU-24852, PTCH-46565, Performance & Goals, Attachment Permissions, Performance Management Forms, Delete Attachment, edit attachment, supported information pod, latest form experience, can delete, do not respect permission, respect permission, permissions, attachment permission, delete , KBA , LOD-SF-PM-POD , Home Page, Pods and Portlets, To Do List , Known Error