SAP Knowledge Base Article - Public

2865500 - Able to Edit Non-secured MDF Objects without Permissions


User not having access to "Non-secured MDF Objects" can still access Non-secured MDF Objects from Position Org Chart via Quick card with available RBP permission to access Secured Object.


  • SAP SuccessFactors HXM Suite
  • Metadata Framework (MDF)

Reproducing the Issue

User can edit a referenced Non-secured object using Position Org Chart via Quick Card if selects "Edit" and can save without error.

  1. Login as user with no permission to "Access to non-secured objects"
  2. Navigate to the Position Org Chart
  3. Select the Position -> Click on Poition quick card 
  4. Select Edit -> Make changes in the Non-Secured Object -> Save 

Data is saved without an error.


"Access to non-secured objects" is a MDF specific pages permissions and is applicable on MDF pages only. If you have permissions to edit a secured object via Manage Data or Position Org Chart such as Payment Information / Country , you can edit a referenced non-secured object via the quickcard and save without any error.


As part of b1911 release fix if user does not have RBP permission to "Access to Non-secured objects" under Meta Data Framework in Manage Permission Role then they will not be able to access the Non-secured objects under Position Org Chart via Quick Card.

But in case customer wants to opt out of this functionality then there is a provision on upgrade center to opt out. Once they opt out irrespective of permission, they will be able to access the non-secured objects. But this is not recommended, instead customer can adjust their RBP roles.

See Also

KBA 2789789 - MDF Permission name change: Access to non-secured objects

KBA 2767161 - 1902 Access to non-secured foundation objects


Access to Non-secured objects, MDF, read/write, edit, no permissions, MDF-31287, MDF-30667. , KBA , LOD-SF-MDF-OBJ , Object Definition & Field Related Issues , Problem


SAP SuccessFactors HXM Suite all versions