You are viewing limited content. For full access, please sign in.

Question

Question

Hide action history from submitter

asked on February 22, 2019

Hi All,

I am having an issue with security on forms due to the Action history.

When an employee is setup as a basic user and a submitter only for a process. They are still able to view the processes action history by navigating to their inbox and completed tasks.

This is an issue as firstly they are able to see who and where the form is going to and they are also able to view the comments that are built into the forms.

If I manually insert a comments box into the next stages this isnt visible to the submitter. However they are again still able to see the action history.

Has anyone got a workaround for this?

Thanks

Mark

 

 

 

0 0

Answer

SELECTED ANSWER
replied on February 23, 2019

Adding a feature request to the backlog to optionally hide the action history for a process. As a first step, would it be useful to simply be able to hide the action history for a specific process entirely? Or do some people need to see it while it's hidden from others?

1 0
replied on February 25, 2019

Hi Jared,

Thanks for getting back to me. Ideally this would be administered through the Access Rights. Anyone who is a Process Admin or Business Manager would be able to view the action history but a Submitter would not be allowed to view this.

Thanks

Mark

1 0
replied on February 25, 2019

I would not like to have it tied to a role unless additional roles are created when this feature is implemented. If new roles are not introduced then I think it would need to be on a per user task level.

0 0
replied on February 25, 2019

The Current form that I am having this issue on requires one individual team to view the action history to identify who has approved or rejected the request. However they don't want the submitter to view who has been involved with the approval or declining of the request.

So I am equally happy for the action history to be viewable on a Specific form level of the process as long as the submitter is not able to access this information.

0 0

Replies

replied on October 21, 2019

Hey @████████, just chipping in to say this feature would definitely be useful and is high priority for us from an HR perspective.

One of the challenges of building end to end employee onboarding solutions using Laserfiche Forms is that action history is visible to everyone. This requires sub-processes being offloaded to secondary support processes (forms) to keep the action history and comments private.

An intuitive (but granular) way to control who can see the action history would be highly appreciated. My initial thoughts for a quick fix from the discussion above would be a "Hide/show Action History" at the task level? 

Something like:

That way we could control who can see the action history at the 'task' level to start with.. This could also be ticked by default making it backwards compatible with historical processes.

I make this recommendation above because it seems like the easiest way to prevent unauthorised users from seeing potentially sensitive action history for their 'tasks' as part of a process..

During a request to recruit process there are parts of the process where non-HR users should have the action history hidden from them.. for example (at a high level):

1) Manager submits request to recruit

2) Task assigned to HR for approval

3) (if approved) Task assigned to Executive Team for financial approval (First non-HR employee who can see entire action history but shouldn't be able to)

4) (if approved) Task assigned to Recruiter to make offer to candidate

5) (if accepted by candidate) Recruiter to upload paperwork

6) Generic IT team member assigned task to set up user in Active Directory (Another non-HR employee who can see entire action history but shouldn't be able to)

7) Assigned to Manager (original initiator) to assign assets to the new user (Non-HR, but entitled to see action history as part of process as they are initiator/manager).

8) Process completed.

 

Hope that helps with context and I'm looking forward to a fix!

Thanks team!

0 0
replied on June 24, 2020 Show version history

Forms 10.4.4 (https://support.laserfiche.com/download/4136/laserfiche-forms-10-4-4) supports the ability to hide the action history when the user views the start event he completed or the user task he participates. 

0 0
replied on June 2, 2021

Where is this option found?

0 0
replied on June 2, 2021

It is on the Access Rights page for the Forms process in question.

0 0
replied on June 2, 2021

Do you know where it is in Cloud? There is no Access Rights page yet. I looked under Details which is the cloud version of Access Rights.

0 0
replied on June 2, 2021

This is not in process automation yet. It's only in our self-hosted offering. 

1 0
You are not allowed to follow up in this post.

Sign in to reply to this post.