SAP Knowledge Base Article - Public

2305184 - Admin can mark object as complete despite the fact that object is in domain he has not access to


- Admin can mark object as complete despite the fact that object is in domain he has no access to,

- Admin has access to object details but item is in domain he has not access to,


Learning Management System (LMS)

Reproducing the Issue

- an LMS admin has access to a specific domain (A) and therefore to the users on this domain,

- this admin has NO access to different domain (B) where is stored affected item,

- the admin views the learning plan of one user on domain  A and this user has affected item on his learning plan,

- the admin is able to see the item but has no option to click on the title to access the item data set,

- the user has once clicked on the item and already started the e-learning, but has not finished it yet,

- therefore, the admin has the option to click on "object details" which can be found directly below the item title in the learning plan,


- by clicking on object details, the admin has access to the content objects of the item "training"


- once the admin clicks on the content object, he can mark the box to complete it


- consequently, the item is recorded and can be found in the learning history of the user



- This situation is expected system behaviour


- The reason for it is due to the following settings in role management:

- Once you navigate to SystemAdmin/Security/RoleManagement/search for roles of affected admin or any other role within the LMS/navigate to Workflow restriction/user management


- Then check the second and third columns (Function and Entity): Edit Online Status and User

- As you can see on example above entity is user and that basically means that admin can edit user online status for any user he has access to (it means online status for all items assigned to this user as well)

- There is not fuction "Edit User Online Status" for Entity "Item" available within the application so you cannot restrict admin to mark object as complete,

- This is expected system behaviour.



- Admin can edit completion of item despite the fact that he has not access to domain where item is stored in, , KBA , LOD-SF-LMS , Learning Management System , Problem


SAP SuccessFactors Learning 1511 ; SAP SuccessFactors Learning 1602 ; SuccessFactors Learning 1508