Hello everyone,
I am attempting to determine best way to direct users to the Task Details page via email using a Task Definition Create Action.
The link is currently being generated correctly using the APEX_PAGE.GET_URL function, but I noticed non-potential owners/or any authenticated user, who is not supposed to see the task details page, is able to access it.
The changes that were made was changing the TASK_ID page item to Checksum Required - Application Level instead of default Checksum Required - Session Level.
Would greatly appreciate guidance on
- Recommended approach to direct users to Task Details page (if diff from this approach)
- How to ensure only users who are supposed to see the Task Details page (i.e. Potential Owners/Business Admin's) are the only ones able to see it.
- I had only 1 statically defined single Potential Owner yet other authenticated users were able to access the page.
Thank you,
Jay
