2305184 - Admin can mark object as complete despite the fact that object is in domain he has not access to

SAP Knowledge Base Article - Public

2305184 - Admin can mark object as complete despite the fact that object is in domain he has not access to

Symptom

- Admin can mark object as complete despite the fact that object is in domain he has no access to,

- Admin has access to object details but item is in domain he has not access to,

Environment

Learning Management System (LMS)

Reproducing the Issue

- an LMS admin has access to a specific domain (A) and therefore to the users on this domain,

- this admin has NO access to different domain (B) where is stored affected item,

- the admin views the learning plan of one user on domain  A and this user has affected item on his learning plan,

- the admin is able to see the item but has no option to click on the title to access the item data set,

- the user has once clicked on the item and already started the e-learning, but has not finished it yet,

- therefore, the admin has the option to click on "object details" which can be found directly below the item title in the learning plan,

ObjectDetails.PNG

- by clicking on object details, the admin has access to the content objects of the item "training"

ObjectDetails.PNG

- once the admin clicks on the content object, he can mark the box to complete it

RecordLearning.PNG

- consequently, the item is recorded and can be found in the learning history of the user

 

Cause

- This situation is expected system behaviour

Resolution

- The reason for it is due to the following settings in role management:

- Once you navigate to SystemAdmin/Security/RoleManagement/search for roles of affected admin or any other role within the LMS/navigate to Workflow restriction/user management

Workflows.PNG

- Then check the second and third columns (Function and Entity): Edit Online Status and User

- As you can see on example above entity is user and that basically means that admin can edit user online status for any user he has access to (it means online status for all items assigned to this user as well)

- There is not fuction "Edit User Online Status" for Entity "Item" available within the application so you cannot restrict admin to mark object as complete,

- This is expected system behaviour.

 

Keywords

- Admin can edit completion of item despite the fact that he has not access to domain where item is stored in, , KBA , LOD-SF-LMS , SuccessFactors Learning , Problem

Product

SAP SuccessFactors Learning 1511 ; SAP SuccessFactors Learning 1602 ; SuccessFactors Learning 1508