Prevent other users from approve/reject task not assigned to them
Prevent other users from approve/reject task not assigned to them
Unknown
shared this idea
Roanna Gunaratnam
responded
Hi All,
This is currently a SharePoint limitation, however we have made sure that our lazy approval feature only allows people who are assigned a task to specify an outcome.
As a workaround a user is able to query the task list to see who was assigned the task and who modified the task. We are looking at how make the task querying process easier. Thanks.
12 comments
-
Ashish Ghai - Sharing Minds
commented
This can be done by adding a rule to the custom task form : when Task Column Assigned to is not equal to current user make task outcome read only
-
Allan Helbling
commented
SharePoint limitation ? It is possible to do it, but it's just a real pain everytime.
https://poszytek.eu/en/nintex-en/nwfo365-en/tasks-permissions-in-nintex-workflow-for-office-365/#more-754 -
shaunlub
commented
I was not sure at first. But I actually like that it is possible for other people to approve forms - provided whoever approves is correctly recorded. This mirrors many paper or email flow processes where temporary approval authority may be given to a subordinate or other manager when the assigned approver is on leave, has left the company or is unable to complete the task for some other reason.
To ensure the approver is the assigned person, putting a rule on the form's decision control, checking the current user is equal to the assigned person would solve this issue for most cases -
Santiago
commented
Does this mean that any user can approve a Task assigned to someone else? We need to ensure the integrity of he approval process. Only the person assigned the task should be able to approve it.
-
Dimitrie
commented
In what enterprise system it is expected that an explicit assigned task to be open to all system contributors. Please put the issue on the fast track
-
Vikrant Behal
commented
What is the use of assigning task if anyone with Contribute permission can approve it? Should I just get approval over email?
It'll be great if Nintex can Fast-track the development of this issue.
-
Sjoerd V
commented
As a workaround you could create a custom task form (nintex forms) and set a rule on the approval buttons to only show when the person editing the form is also the asignee, and of course set the task list to not allow for inline editing and datasheet view
-
Mike Turnbull
commented
Hi Roanna, thank you for your update. Just to clarify about your suggested workaround:
If Bob was assigned a task, and Fred completed it. Are you suggesting that I am able to see that it was assigned to Bob, but completed by Fred simply by looking at the metadata on the task item? Is that would you mean by querying the task list?
Many thanks
Mike -
KokKoon.Gan
commented
A task could be edited by users other than the assignee, this is known and has to be fixed.
-
Mike Turnbull
commented
Any progress with this?
-
Francois Pienaar commented
Where do we stand on this item? This is a major flaw with SharePoint Designer workflows and it seems like Nintex works in the same manner.
-
Carlos Castañón
commented
In Nintex Workflow for SharePoint 2013 works great, but in Office 365, any user with permission in task list can approve / reject tasks assigned to other users...
