I have a question about the visibility of Task forms. We have a custom emai

mikej117 over 8 years ago

I have a question about the visibility of Task forms.
We have a custom email sent to task assignees where we include a hyperlink directly to the task they have been assigned to (e.g. site.appiancloud.com/.../12345). One of these email recipients has forwarded the email to someone else, and that other person has been able to click the link and view the task (which is displayed as read-only).
The data is supposed to be secured so that only the initiator and reviewer assignee(s) can view the data displayed on the form.

We could remove the task link from the email, but it would still be possible for the assignee to copy the URL for the task and provide that to someone else. Is there a way to secure tasks so that only the assignee(s) can view them?

Discussion posts and replies are publicly visible

Parents

0 mahipalc over 8 years ago

This is what I observed in my case:

Let's say there are six basic users,
basic1,
basic2 (belongs to Group A),
basic3 (belongs to Group B),
basic4 (belongs to Group C),
basic5 (belongs to Group D),
basic6 (belongs to Group E).
Assume initially task is assigned to ONLY basic1, so normally he can accept and complete the task.

Scenarios:
------------------------------------------------------------------------------
Process Which what happens if the
Model group forwarded link opened by
Security given respective group basic user
--------- -------- ----------------------------
Editor Group A Can accept the task and
                                                                      complete it
Manager                     Group B Can accept the task and
                                                                      complete it
Viewer                     Group C Can see the task/form in
                                                                      read-only mode
Initiator                     Group D "The requested task is not available
                                                                      ...." error message.
Deny                     Group E "The requested task is not available
                                                                      ...." error message

------------------------------------------------------------------------------

Note: basic1 is task assignee, Group A,B,C,D,E given process model security as mentioned above.
If the task is opened by any other basic user(who is not in process model security groups/task assignee group)
"The requested task is not available..." error message will be shown.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 mahipalc over 8 years ago

This is what I observed in my case:

Let's say there are six basic users,
basic1,
basic2 (belongs to Group A),
basic3 (belongs to Group B),
basic4 (belongs to Group C),
basic5 (belongs to Group D),
basic6 (belongs to Group E).
Assume initially task is assigned to ONLY basic1, so normally he can accept and complete the task.

Scenarios:
------------------------------------------------------------------------------
Process Which what happens if the
Model group forwarded link opened by
Security given respective group basic user
--------- -------- ----------------------------
Editor Group A Can accept the task and
                                                                      complete it
Manager                     Group B Can accept the task and
                                                                      complete it
Viewer                     Group C Can see the task/form in
                                                                      read-only mode
Initiator                     Group D "The requested task is not available
                                                                      ...." error message.
Deny                     Group E "The requested task is not available
                                                                      ...." error message

------------------------------------------------------------------------------

Note: basic1 is task assignee, Group A,B,C,D,E given process model security as mentioned above.
If the task is opened by any other basic user(who is not in process model security groups/task assignee group)
"The requested task is not available..." error message will be shown.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data