nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Not the owner of the Task able to approve the User Review Task

LIWoven

Hi All,

I am facing one issue related to User Review Task.

We are using TeamSite 7.1 and WFM for creating workflows and we have a one Review Task in that that sends the mail to the Reviewer for approval/rejection.

Also, reviewer should be a part of approval group.

Now there is a scenario say If A initiates the Job and choose B as a reviewer, B gets the mail with a Task link in that and Finish button to
approve/reject.
B forwards that mail to A(who is the initiator of the workflow).

A clicks on the link, enter his credentials to Login to TS and click on Finish, instead of getting the error message, hee was able to approve the User Review Task.

Ideally he should not as He is not the Owner of the Task(owner of the Task is

and nor even the part of Approval Groups and not the Master as well.

The only thing is that both A and B are of author roles, but I checked that Permission overrides is unchecked for the Author role.
Also, I noticed if other author tries to approve the Task who it doesnot own, he is not able to do so,
its the case only when Initiator of the workflow tries to approve/reject the task.

I have gone through some posts but I am not clear whether it is the bug or is there any solution for this.

Please help me if any one knows the solution to this.

Thanks,
Monika

Find more posts tagged with

Comments

Rick Poulin

If I recall correctly, this is due to a 'quirk' whereby the owner of the job is allowed to participate in the review (for cases where all jobs are owned by an editor or administrator). Since your case sounds like the review task only ever has one owner, you may want to switch it out for a User Task. While not as meaningful semantically, it would be one way to get around your problem if you want the job creator to remain the job owner.

LIWoven

I am sorry I think I am not clear with one point in my post the Task which we are using for review is the User Task only which has one owner.
The issue is that the Initiator of the Job (who is not the owner of User Task) is able to approve it and complete the task.

Ideally only the owner of the User Task(Review Task in this) should be able to take action on this.

Please suggest

Adam Stoller

I am sorry I think I am not clear with one point in my post the Task which we are using for review is the User Task only which has one owner.
The issue is that the Initiator of the Job (who is not the owner of User Task) is able to approve it and complete the task.

Ideally only the owner of the User Task(Review Task in this) should be able to take action on this.

Please suggest

This is a long standing issue that has been posted about many times in these forums - the owner of the job is granted full administrative abilities over every task in the job, so the only way to prevent this is to hard-code some other value for the job owner (which then messes up things like "View My Jobs" for the person who actually initiated the process)

Feel free to file a bug / enhancement request with Support, but I wouldn't hold my breath about it getting fixed - especially since it's kind of documented behavior now: (see "Table 8" starting on pages 112 and 113 of the TeamSite Administration Guide
Version 7.1.0[ts_71_admin_v01_en.pdf]) and note that "Add Task Comment" is somewhat synonymous with being able to transition a task.