I'm hoping someone can help on this. Is there a way (especially if I can do it by security group) to block users from being able to go into a journal entry-email and clicking on it and then forwarding that email out?
I'd like to stop people from being able to just go into the journal entry and re-forwarding certain emails out that are created and put in the journal by a one-step process I created. This is a security risk.
I've tried several options under the Security Group section to remove everything but "view" in all of the Journal sections and even the System Email rights and nothing works. I go back in under my test account (lowest level access) and I can still click on the email in the journal, click forward and send it out.
Any help would be appreciated.
PS I don't know if it matters or not, but we are on 9.6.1 and hosted.
Change the relationship used for that tab.
Create a new relationship to journals for that ticket, but instead of relating to the Journal group leader, relate directly to Journal - Mail History.
Add that relationship to the form arrangement, then filter journal mail history records out of the existing journals tab.
The consequence will be that the toolbar no longer shows the Email button, as that only appears when you target the group leader, Journal
Definitely a good hack! Hopefully, in the future Cherwell will allow us to pick if we want those features to be enabled through an expression or by some other means. Hope you are doing well Doug-Robinson!
Mat - In looking at this deeper for you, I believe that you could filter out any specific email messages which you do not what to show in the Journal Mail History.
Incident Owns Journals contains two fields which I believe you could use to create a filtered view. There is a "Mail Direction" data property and the "Details" data property. Modify the Journal Tabs filter to not show records when Mail Direction is "Outbound" and then be sure Approval emails being sent out are "From" a different email than your regular monitor(use Like %From:email-addy%). Craft your filter using those two criteria.
This way they will not show in the general Journal's tab, then Create a new Tab which only your Admin group can see and show specifically just those Approval emails in that tab. That way you are still able to see and troubleshoot problems in approval emails and still email from the tool.
That's how I would try to solve it.
Jay - Amen to that! That's what I was thinking. Even if they just put a checkbox on the tab settings where you can uncheck or check it off if you don't want the email button to show and poof...done deal. :)
Doug - Thanks a bunch for the thought on this. I'm going to play around with this and see if I can get it to work. :) Only other thing I did before was adjust the "filter" on the Journal tab, but then it just removed all of the email history, which I don't really want because people need to see it.
But I will see what yours does. I personally don't care if the email button disappears...that's actually perfect for me. :) But I'm hoping that with this change, people can still see the Email History, but just can't do anything with it but view it. :)
Thanks a ton for the suggestion!