SAP Knowledge Base Article - Public

3625527 - Target population not respected for field level permissions in Employee Time object

Symptom

  • Custom fields in the Employee Time object are visible to users in the 'Create Absence' Employee Self-Service (ESS) UI for themselves, even though permissions are configured to restrict access to a specific permission group (or direct reports only)
  • The issue occurs despite selecting the 'Exclude granted users from having the same access to themselves' option in the permission role configuration.
  • This behaviour applies to both custom and standard fields.

Environment

SAP SuccessFactors Employee Central > Time Off

Reproducing the Issue

  1. Create custom fields in the Employee Time object.
  2. Configure a Permission Role granting access to these custom fields (or standard fields), with the Target Population set to 'Granted User's Direct Reports' or a specific Permission Group. Ensure the 'Exclude granted users from having the same access to themselves' option is selected.
  3. Proxy as a user included in the Access Population of the Permission Role.
  4. Attempt to create an absence via the 'Create Absence' ESS UI for the proxy user.
  5. Observe that the custom fields (or standard fields) are visible, even though they should not be.

Cause

  • The Target Population setting in the permission role is only relevant for the Employee Time object itself and does not apply to field-level permissions.
  • As long as a user has access to the Employee Time object, they will have access to all fields within it, including custom fields.

Resolution

This is currently not supported as per system design.

See Also

Setting up Additional Restrictions for the Employee Time Object

Keywords

custom fields, employee time object custom fields, ess ui, exclude granted users, create absence, field-level permissions, target population, permission role, visibility issue, field level permissions employee time, field level permissions employee time object, field level permissions request leave, field level permissions request absence, field level permission time off, , KBA , LOD-SF-EC-TIM-UI , Team Absence Calender/ Workbench/ ESS UI's , Problem

Product

SAP SuccessFactors Employee Central all versions