Appian 19.4
we got a task report where in we pull tasks assigned to multiple groups. baseline is other group people should not access other groups tasks.
But when the user from group A shares the taskid to Group B people they can replace the taksid on the address bar and able to see the data.
How do we stop showing the taskid on addressbar or is there a way to stop other group people not to see other groups task data.
Discussion posts and replies are publicly visible
In 20.3 it was just announced that taskId in the URL will be replaced with obscured UUID String. I think this is just a security issue until that occurs. You cannot set visibility on tasks like you can for records. However, what if you deny access on the PM the task sits in from the group you don't want to see it?
Seems like PM security should handle task viewing:
docs.appian.com/.../monitoring_view.html
we have 1 PM designed , which is accessed by 120+ groups and depending upon logged in user we show/hide data for the logged in user group.
So we have given Viewer access to XXX_ALL_USERS appian group.
And the to be assigned group is defined on runtime from Parent process through MNI.
Can we set up security runtime before calling the subprocess or first ting on the Sub process?
Found "Modify Process Security Smart Service" trying to make use of it as first node after start node