Project and Portfolio Management Practitioners Forum
cancel

Security task

Highlighted
CarlosGomezCord
Frequent Contributor.

Security task

User1 creates a request and subbmit.

The workflows goes to an state in which user1 cant do anything, because need the approval of User2.

But User1 can edit the request and i need restrict that. ¿How it is possible?
3 REPLIES
Semenov Alexand
Acclaimed Contributor.

Re: Security task

Hi.
You need check security setting in WF steps.
I think in your case in setting action avaliable only for User2. Also you need check "User access" tab in request type. May be this set as "Edit" = All. I recommend set security via tokens for examnple "REQ.P.Assigned_to_user_id" i.e
For more information see DemandMngCG.pdf and security and tokens.
Good Luck.
Volker Schoettn
Honored Contributor.

Re: Security task

Hi,

check the User Access tab of the request type.
I guess the flag "modify" in the created by row is set and you are not able to remove it.

However:
That means the creator is always able to modify his own requests.

Regards
Volker
Jim Esler
Acclaimed Contributor.

Re: Security task

You could use the Status Dependencies tab in the request type to make the fields non-editable at this step. This would also prevent the approver from modifying the field, though. Depending on the functions the approver is allowed to do, this may be reasonable.