Approval Process
I would like to rely on the Approval process built in to Service Desk for all kinds of functionality. However, as it is currently implemented I believe it has a few problems.
Am I correct in stating that it does not require any authentication to Approve or Deny a Request for Approval?
I sent an Approval on a request to a user, they forwarded the email to another user. That other user followed the link and approved the request with a comment. The system reports only to whom the approval was sent and there is no indication that a completely different user actually submitted the approval.
Can there be an option to REQUIRE authentication before submitting an approval?
Granted, a user shouldn't be forwarding these emails - but simply receiving a link shouldn't be grounds for allowing approval and certainly shouldn't report as if the original user was the one doing the approving. It would be nice to have IP address information and login/access information on every request/approval.
This is very important in showing management that this system is "trustworthy" in terms of its approval process.
-gjaynes
Am I correct in stating that it does not require any authentication to Approve or Deny a Request for Approval?
I sent an Approval on a request to a user, they forwarded the email to another user. That other user followed the link and approved the request with a comment. The system reports only to whom the approval was sent and there is no indication that a completely different user actually submitted the approval.
Can there be an option to REQUIRE authentication before submitting an approval?
Granted, a user shouldn't be forwarding these emails - but simply receiving a link shouldn't be grounds for allowing approval and certainly shouldn't report as if the original user was the one doing the approving. It would be nice to have IP address information and login/access information on every request/approval.
This is very important in showing management that this system is "trustworthy" in terms of its approval process.
-gjaynes