<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="https://community.appian.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Hi all,   we found a privilege issues and don&amp;#39;t know whether it is</title><link>https://community.appian.com/discussions/f/process/4653/hi-all-we-found-a-privilege-issues-and-don-t-know-whether-it-is</link><description>Hi all, we found a privilege issues and don&amp;#39;t know whether it is a expected behavior. user in Group B can also accept the tempo task even if it is assigned to Group A, as long as he knows the task link. OriginalPostID-144610 OriginalPostID-144610</description><dc:language>en-US</dc:language><generator>Telligent Community 12</generator><item><title>RE: Hi all, &lt;br /&gt;&lt;br /&gt;we found a privilege issues and don't know whether it is</title><link>https://community.appian.com/thread/16930?ContentTypeID=1</link><pubDate>Mon, 13 Apr 2015 09:14:43 GMT</pubDate><guid isPermaLink="false">d3a83456-d57b-489c-a84c-4e8267bb592a:0ad0930e-2b37-4662-8b8a-8463a0a596a8</guid><dc:creator>eaglez</dc:creator><description>thank you very much , csteward.&lt;br /&gt;yes, it is the root cause. originally i didn&amp;#39;t use &amp;quot;Manager permissions&amp;quot;, but there was a weird issue and it seems &amp;quot;Manager permissions&amp;quot; could fix it.&lt;br /&gt;&lt;br /&gt;anyway, thanks again.&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Hi all, &lt;br /&gt;&lt;br /&gt;we found a privilege issues and don't know whether it is</title><link>https://community.appian.com/thread/16893?ContentTypeID=1</link><pubDate>Fri, 10 Apr 2015 20:35:23 GMT</pubDate><guid isPermaLink="false">d3a83456-d57b-489c-a84c-4e8267bb592a:551343eb-5f8a-4afc-81da-9e51b438791b</guid><dc:creator>Chris</dc:creator><description>Note this may also be able to happen if the user has Manager permissions to the process model.  In that scenario the user can access tasks assigned to other users (it is not listed in the documentation but should be AN-401222)&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Hi all, &lt;br /&gt;&lt;br /&gt;we found a privilege issues and don't know whether it is</title><link>https://community.appian.com/thread/16868?ContentTypeID=1</link><pubDate>Fri, 10 Apr 2015 06:04:37 GMT</pubDate><guid isPermaLink="false">d3a83456-d57b-489c-a84c-4e8267bb592a:78bf7a08-cf3a-4ec2-ba7a-708ac0046e63</guid><dc:creator>eaglez</dc:creator><description>hi steveh, it is a basic user.&lt;br /&gt;&lt;br /&gt;hi sikhivahans, i did check the group memberships. &lt;br /&gt;the case here is : &lt;br /&gt;we set the same email for all the test accounts and i&amp;#39;m in the email group. so i can recieve all new task notification email.&lt;br /&gt;like the attached picture, the task is supposed to be assigned to another group &amp;quot; Client Manager&amp;quot;.&lt;br /&gt;however, i logged in as &amp;quot;IBG onboarding&amp;quot; which belongs to a different group and is just a basic user. i clicked the link in the email and can accept the task as &amp;quot;IBG onboarding&amp;quot;.&lt;br /&gt;&lt;br /&gt;this only happens in tempo. in portal app, it won&amp;#39;t.&lt;br /&gt;&lt;br /&gt;&lt;p&gt;&lt;a href="/cfs-filesystemfile/__key/communityserver-discussions-components-files/14/test.png"&gt;&lt;img src="/cfs-filesystemfile/__key/communityserver-discussions-components-files/14/test.png" alt=" " /&gt;&lt;/a&gt;&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Hi all, &lt;br /&gt;&lt;br /&gt;we found a privilege issues and don't know whether it is</title><link>https://community.appian.com/thread/16834?ContentTypeID=1</link><pubDate>Thu, 09 Apr 2015 14:01:51 GMT</pubDate><guid isPermaLink="false">d3a83456-d57b-489c-a84c-4e8267bb592a:997f2edf-8f18-4eae-99b6-de5a56a92d37</guid><dc:creator>sikhivahans</dc:creator><description>@eaglez If a basic user from one group tries to access the task from other group to which he doesn't belong the following error message will be seen:&lt;br /&gt;"The requested task is not available.&lt;br /&gt;You may not have permission to view the task, or it may have been deleted."&lt;br /&gt;It would be worth checking the group memberships of the user who is able to access the task of other group by means of link explicitly.&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Hi all, &lt;br /&gt;&lt;br /&gt;we found a privilege issues and don't know whether it is</title><link>https://community.appian.com/thread/16833?ContentTypeID=1</link><pubDate>Thu, 09 Apr 2015 13:52:17 GMT</pubDate><guid isPermaLink="false">d3a83456-d57b-489c-a84c-4e8267bb592a:e53d54b8-1ab9-40bf-8537-0dec46d573a5</guid><dc:creator>Steve</dc:creator><description>Is it an administrative user?&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item></channel></rss>