RE: Why Can Appian Tasks Be Opened from Any Application/Site/Page URL?

Stefan Helzle — Tue, 11 Nov 2025 20:12:49 GMT

Think of a user using multiple applications. He will need some overarching dashboard to have access to all tasks and data from all the applications. This is not a bug, but a feature.

RE: Why Can Appian Tasks Be Opened from Any Application/Site/Page URL?

Mike Schmitt — Tue, 11 Nov 2025 19:58:56 GMT

[quote userid="293911" url="~/discussions/f/user-interface/39920/why-can-appian-tasks-be-opened-from-any-application-site-page-url"]Why does Appian allow tasks to be accessible from any site/application URL path?[/quote]

Tasks do not care even the slightest bit about what apparent site/application they're opened from. The fact that they're apparently opened from a site is basically a retrofit to not make the user think they've been bounced to the "Tempo" side. Security of a particular task (process security, assignment, etc) is not affected by the site the user is accessing it from - and likewise I would assume that the user couldn't arbitrarily view a task from a site they wouldn't have access to. And almost no end users are going to dissect URLs to mix-and-match like this, nor would they care.

[quote userid="293911" url="~/discussions/f/user-interface/39920/why-can-appian-tasks-be-opened-from-any-application-site-page-url"]is there a way to restrict task access to specific applications/sites[/quote]

no. task security is controlled strictly from process instance security and task assignment, since (as previously stated) the "source site" makes zero difference.

[quote userid="293911" url="~/discussions/f/user-interface/39920/why-can-appian-tasks-be-opened-from-any-application-site-page-url"]Does the application/site/page portion of the URL serve any functional purpose when accessing tasks, or is it purely cosmetic/contextual?[/quote]

the latter.

[quote userid="293911" url="~/discussions/f/user-interface/39920/why-can-appian-tasks-be-opened-from-any-application-site-page-url"]any security implications[/quote]

none that I know of. if a user has access to X Y and Z sites, and A B and C tasks, they'll technically be able to see any A B or C as if from X Y or Z, in any permutation, if they mess with the URL the right way.