I have a question about the visibility of Task forms. We have a custom emai

I have a question about the visibility of Task forms.
We have a custom email sent to task assignees where we include a hyperlink directly to the task they have been assigned to (e.g. site.appiancloud.com/.../12345). One of these email recipients has forwarded the email to someone else, and that other person has been able to click the link and view the task (which is displayed as read-only).
The data is supposed to be secured so that only the initiator and reviewer assignee(s) can view the data displayed on the form.

We could remove the task link from the email, but it would still be possible for the assignee to copy the URL for the task and provide that to someone else. Is there a way to secure tasks so that only the assignee(s) can view them?

OriginalPostID-175551

OriginalPostID-175551

  Discussion posts and replies are publicly visible

Parents
  • I haven't been able to replicate this. Can you please provide the steps to do this? This is what I have tried:

    - Created a task
    - Assigned it to a group / single user
    - Sent an email with the task URL
    - Forwarded to a different user (which is authenticated in the environment but is not in the group that the task is assigned to or is not the user that the task was assigned to)

    In both cases I get the message "The requested task is not available.You may not have permission to view the task, or it may have been deleted"

    Is there something I'm missing?
Reply
  • I haven't been able to replicate this. Can you please provide the steps to do this? This is what I have tried:

    - Created a task
    - Assigned it to a group / single user
    - Sent an email with the task URL
    - Forwarded to a different user (which is authenticated in the environment but is not in the group that the task is assigned to or is not the user that the task was assigned to)

    In both cases I get the message "The requested task is not available.You may not have permission to view the task, or it may have been deleted"

    Is there something I'm missing?
Children
No Data