SAP Knowledge Base Article - Public

3788861 - user A should have no permission to view user B's profile, however he could

Symptom

  • User A belongs to Company A, and is a manager
  • User C belongs to Company C, is a normal terminated employee
  • In permission role, user A could view his/her direct report's profile and all level down.
  • However, user A could view user C's profile

Environment

SAP Successfactors Employee Central

  • Permission

Cause

User B's manager was User C when user B was terminated. Later on User C was transferred to Company A and became a direct report of User A.

The system evaluates the current reporting hierarchy at runtime; because the inactive user's manager relationship persisted and that manager is now within the viewer's hierarchy, access is granted via inherited reporting levels.

Resolution

Update User B's EP manager to NO_MANAGER via Import Employee Data<Basic Import.

Details please refer to 2618227 - Updating user information of an inactive user through Basic Import 

See Also

2618227 - Updating user information of an inactive user through Basic Import 

Keywords

permission, target population, direct report, level down, manager, people profile, inactive, reporting hierarchy, NO_MANAGER , KBA , LOD-SF-EC-RBP , Roles & Permissions (EC Core only) , How To

Product

SAP SuccessFactors Employee Central all versions ; SAP SuccessFactors HCM Core all versions ; SAP SuccessFactors HCM Suite all versions