E-mail notifications with shortcut: SWNWIEX

[Alon Raskin]

Hi Martijn,
 
We dont use the RSWUWFML2 here so I am not speaking from experience. But I would have assumed that the user is taken past the first screen when they click on the shortcut. Is that not the case?
 
Alon Raskin
e: araskin at 3i-consulting.com <mailto:araskin at 3i-consulting.com> 
p: +1 207 409 4983 (please note new number)
f:  +61 3 8610 1239 
w: http://www.3i-consulting.com

________________________________

From: sap-wug-bounces at mit.edu on behalf of Martijn Wever
Sent: Thu 12/1/2005 06:29
To: SAP-WUG at MITVMA.MIT.EDU
Subject: E-mail notifications with shortcut: SWNWIEX



Dear workflow experts,

In our release 4.6c we have activated the improved RSWUWFML2 program and are using it to attach a shortcut that will execute the work item. This shortcut uses transaction SWNWIEX to execute the work item. However, with this transaction the user can execute almost ANY work item just by entering the WI id. The transaction does not check if the work item is actually in the users inbox; just if he/she is a possible agent. I would think this could be a security issue but since I haven't seen any postings regarding this point I might be overlooking something (besides creating seperate tasks/possible agent assignments per approver group - in our case 70 company codes X 3 release levels)?

Any comments would be welcomed.



Regards,

Martijn Wever


_______________________________________________
SAP-WUG mailing list
SAP-WUG at mit.edu
http://mailman.mit.edu/mailman/listinfo/sap-wug


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/ms-tnef
Size: 5140 bytes
Desc: not available
Url : http://mailman.mit.edu/pipermail/sap-wug/attachments/20051201/2fecb469/attachment.bin