Hello,

 

If you send an approval from a request to someone, but if that someone has their emails on forward to another person, then the other person can approve the approval request.

 

Hyperthetical situation:

 

Manager forwards emails to next highest ranking staff member (for whatever reason). This staff member requests something that only his manager can approve. The technician is not aware of the manager having forwarded his emails to the requesting staff member and sends the approval to the manager. The staff member can approve his own request because he has received the email with the approval link.

 

We are working around this by instead providing links to the homepage which shows outstanding approval requests and will display depending on the user who is logged in to manageengine at the time.

 

I am posting this not only to have it requested as an important development but to make people aware just in case they are bound by strict auditing rules like ourselves.

 

Many Thanks.