3602984 - [Onboarding] External users are able to remove the attachments added in custom MDF object even after restricting the permissions

For the attachment field in the custom MDF object, permissions are restricted to read-only still external users are able to delete them.

SAP SuccessFactors Onboarding - All Versions

1. Configure the custom MDF object, include the attachment field
2. For external users, set the field level permissions as read only for the attachment field 
3. Add the object in both NHDR and PDC step
4. Attachment is being added by the onboarding participant in NHDR step
5. The object is flown to PDC step however the external users are able to delete the uploaded attachments

This is an expected behavior.

This is the expected behavior. The attachment fields deletion is not restricted by the RBP.

Custom MDF Object, Attachment, Field-Level Permissions, External Users, Remove, Delete, Personal Data Collection, onboarding. , KBA , LOD-SF-OBX-PDC , Personal Data Collection , Problem