Skip to main content

Hi, I'm having a problem around understanding the required permissions to assign a task to a person in a scenario where the person does not require access to the parent site where the library ask resides

Scenario:

Site: https://sharepoint.com/sites/team      - Permissions for UserA = NONE (the user does not need to access the site in general)

Library: https://sharepoint.com/sites/team/DocLib    - Permissions for UserA = NONE (the user does not need access to the source document, from which the workflow runs)

However, a workflow within the Document Library above could trigger a task for "UserA",  who would then need to complete their task (the task would be https://sharepoint.com/sites/team/WorkflowTasks)

Due to the requirement that non-site members may require access to their task, I have tried to give "DomainEveryone" = Contribute permission to the https://sharepoint.com/sites/team/WorkflowTasks list.

However, I still get this issue.

(in the above scenario, UserA still has no site access, but is given direct access (contribute) to the WorkFlowTasks library)

Am I missing something obvious? I would think that having contribute access to the task list would be sufficient, but it is not

If I give Everyone = Contribute access to the entire site, it works. However, this is way too much permission. I would like to keep permission to a minimum for non-site members to access tasks assigned to them

Thanks

Carl

see ApproveReject.aspx page permissions - "You are not authorized to respond to this task." 


this is not the error I am getting.

as my post says, the person has contribute rights and is the task assignee, making the above article incorrect

thanks


Hi,

I think that the user needs at least read permission on the item on whom the workflow is running..could you try if giving him permission on the item (you could do that directly in flexi task action, if you're using flexi task) he will be allowed to complete his task?

Giacomo


Reply