Details
-
Bug
-
Resolution: Fixed
-
Low
-
None
-
1
-
Major
-
Description
Issue Summary
In Next Gen JSD projects, if you set an approver field in the Context fields area, it should be an internal field that should not display the approvers selected on the portal view.
The context fields section (on the request type config page) specifically mentions: "These fields are only available to internal users on your site. They are hidden from customers.", so agents/admins expect the value/users selected in the approver field to be hidden from the portal. This is misleading and is a potential security breach if customers are able to see the internal approvers selected when the agents/admins do not wish to show it.
Steps to Reproduce
- Go to next gen project > Project Settings
- Select "Request types" > "Edit workflow"
- Select a status > select "+" in the Approval section
- Set the transitions > "Next"
- "Who chooses approvers?" select "Agent selects approvers"
- Approver field, create a new one > Save and close
- Go back to the Request type, the approver field selected will be found under the Context fields section.
- Create a request and select an approver > Open the request type in the portal view
Expected Results
The approver field selected should be hidden from the request view:
Actual Results
The approver field selected displays the approvers on the request view:
Workaround
None