Showing results for 
Search instead for 
Did you mean: 

ApproveReject.aspx page permissions - "You are not authorized to respond to this task."

Not applicable
2 3 5,639

Since this behavior continues to be a hot issue I have explained this behavior further.

As it was mentioned previously in the thread ("You are not authorized to respond to this task." message ), in order to view tasks assigned to other users, a user must have at least "Manage Hierarchy" permission levels at the site level which is *technically* correct as that permission level includes permissions applied when "Full Control" is given to a user. To be more specific I have provided the exact permission levels needed to access a Flexi-task not assigned to you.

Here are the exact minimum permission level requirements at the site level to view tasks assigned to users other than you:

(This assumes you already have the required "Edit permissions" aka contribute)

List Permissions:

View Items  -  View items in lists and documents in document libraries.

Open Items  -  View the source of documents with server-side file handlers.

View Versions  -  View past versions of a list item or document.

Site Permissions:

Manage Permissions  -  Create and change permission levels on the Web site and assign permissions to users and groups.

Manage Web Site  -  Grants the ability to perform all administration tasks for the Web site as well as manage content.

Add and Customize Pages  -  Add, change, or delete HTML pages or Web Part Pages, and edit the Web site using a Microsoft SharePoint Foundation - compatible editor.

Browse Directories  -  Enumerate files and folders in a Web site using SharePoint Designer and Web DAV interfaces.

View Pages  -  View pages in a Web site.

Enumerate Permissions  -  Enumerate permissions on the Web site, list, folder, document, or list item.

Browse User Information  -  View information about users of the Web site.

Open  -  Allows users to open a Web site, list, or folder in order to access items inside that container.

Now with that being said, these permissions are required due to how the NintexWorkflow/ApproveReject.aspx page checks if you are qualified to view the task. There are a number of checks that happen onpageload.

The first check this pages does is to see if the user has at least "EditListItems" permissions. (This is the "Edit items" permission level which is included in contribute). This is to confirm if you have permission to edit the ask item.

Next, the page will attempt to check if the user viewing the task matches the HumanWorkflowID of the user assigned to the task. This ID is stored within the Nintex Workflow database. This is to confirm if the task is assigned to the person requesting this item.

If the user does not match the HumanWorkflowID the page then checks if the user has elevated permissions via a custom "isadmin" check. The permission levels required by this "isadmin" check are the following:

Manage Permissions

Manage Web Site

View Pages


Add and Customize Pages

As you can see these permission levels are the same as those included in the list above. The only difference being my list includes the dependent permission levels.

If you pass either the HumanworkflowID check or the "isadmin" check the page will display the task page successfully. All of the aforementioned permissions checks are done onpageload.

For reference those permissions are listed in full detail here:


Andrew Beals

Automation Master
Automation Master

Hi Andrew,

does this subset of permission give the user only the view task ability or could they also delegate a task (a site collection admin for example could always delegate tasks for other users)? Do you know which are the least permission to allow a user to do that?

Not applicable


Whoops! I probably should have been more specific. This post was in regards to viewing the task since that was the original Question. However, these rights were intended for users who can delegate this task.

So to answer your question: Both

It should be noted that preventing users who aren't assigned to the task from viewing the task is by design. The types of permissions required to view this task are similar to users with "Full Control" at the site level. Generally, you would only give these permissions to Site Admins.

Hope this answers your question!


Andrew Beals

Automation Master
Automation Master

Hi Andrew,

thank you for your explanation!

I have a customer who asked me if is it possible to give some user rights to just see tasks (and their forms) assigned to other people without having delegation permissions but I was afraid that this was the answer..

Thanks again