SAP Knowledge Base Article - Public

2907128 - User can edit the shared story which is shared with View Access only in SAP Analytics Cloud

Symptom

  • User can edit the shared story which is shared with View Access only in SAP Analytics Cloud
  • This happens when user was assigned with a role which is granted Create and Manage rights for Private Files

Environment

  • SAP Analytics Cloud (Enterprise) 2020.2

Reproducing the Issue

  1. Log on to SAP Analytics Cloud with BI Admin user.
  2. Create a new role based on BI Content Viewer template.
  3. Check on Create and Manage rights for Private Files.
  4. Save this role.
  5. Go to Users, select one user (e.g. UserA) and assign this role to UserA.
  6. Share one story to UserA, set the Access level to View.
  7. Now, use UserA to login.
  8. Go to Files and find the shared story in the root folder.
  9. Open it and notice the Edit button is available.
  10. Click Edit and perform some change, then save.
  11. Notice the save will be also successful.

Cause

  • UserA has a role with Manage right on Private Files.
  • This allows the user to have full control over any private files for all the users.

Resolution

  • Assign UserA a role which does not have manage right.

See Also

Your feedback is important to help us improve our knowledge base.

Keywords

SAP Cloud for Planning, sc4p, c4p, cforp, cloudforplanning, Cloud for Analytics, Cloud4Analytics, CloudforAnalytics, Cloud 4 Planning, BOC, SAPBusinessObjectsCloud, BusinessObjectsCloud, BOBJcloud, BOCloud., SAC, SAP AC, Cloud-Analytics, CloudAnalytics, SAPCloudAnalytics,Error, Issue, System, Data, User, Unable, Access, Connection, Sac, Connector, Live, Acquisition, Up, Set, setup, Model, BW, Connect, Story, Tenant, Import, Failed, Using, Working, SAML, SSO, sapanalyticscloud, sap analytical cloud, sap analytical cloud, SAC , KBA , LOD-ANA-ADM , SAC Administration , LOD-ANA-DES , Story Design & Visualizations , Bug Filed

Product

SAP Analytics Cloud 1.0