Offboarded employee that can edit offboarding tasks although having only view permission.
SAP SuccessFactors Onboarding
Reproducing the Issue
1. Offboard a user
2. Double check the permissions set to the User. They should be showing as View permissions only for the user in Offboarding 2.0 permissions
3. You can see on the tasks for the Offboarded user (which you are currently proxied to) that you can edit the task as well.
The reason that this is happening is due to that the user has "Admin access to MDF OData API" permissions.
This permission overrides all view mdf odata object permissions which gives the offboarded user to edit a task even though only View permissions is set to the user
Please do remove "Admin access to MDF oData API" permission to the user.
ONB 2.0, Offboarding, Admin access to MDF OData API , KBA , LOD-SF-OBX-ADM , Admin UI , Problem