Email approvals for Creatio anonymous service security level

Hi all, 

Looking at the https://marketplace.creatio.com/app/email-approvals-creatio addon. Looks great, however I was wondering how secure is the anonymous service. Are there any security limitations to be aware of ?

Thanks, 

Damien

Like 0

Like

1 comments
Best reply

Hello!

This service is needed so that a user without an active user session can approve or reject a request directly from a unique email.
The security of the service is based on sending a personalized email and using a token that allows sending the request.
Therefore, the approval can only be performed by the user who has the corresponding link.

In general, using such a service in this case is a common practice for receiving notifications from external systems into the application when it is necessary to perform a quick action without requiring user authorization.

Hello!

This service is needed so that a user without an active user session can approve or reject a request directly from a unique email.
The security of the service is based on sending a personalized email and using a token that allows sending the request.
Therefore, the approval can only be performed by the user who has the corresponding link.

In general, using such a service in this case is a common practice for receiving notifications from external systems into the application when it is necessary to perform a quick action without requiring user authorization.

Show all comments