Versions Compared

Old Version 2

changes.mady.by.user Jonathan Yang

Saved on

compared with

New Version Current

changes.mady.by.user Jonathan Yang

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Migrated to Confluence 4.0

...

Refer to the instruction in http://dev.joget.org/community/display/KB/Showing + Process +Instance+%28List+Record%29+Data+in+a+FormInstance (List Record) Data in a Form.

I found user just need to change the id number in the url, then he can see all the content of the forms that was applied submited by other people.

For example :

http://localhost:8080/jw/web/userview/leaveApp/userview//applicationForm?id=21162_leaveApp_applyLeaveProcess

http://localhost:8080/jw/web/userview/leaveApp/userview//applicationForm?id=21163_leaveApp_applyLeaveProcess

httpapplyLeaveProcesshttp://localhost:8080/jw/web/userview/leaveApp/userview//applicationForm?id=21164_leaveApp_applyLeaveProcessHowapplyLeaveProcess

How can I prevent this ? 

Appreciate your kindly help.

...