I have some site workflows that a scheduled to run automatically at set times (via Schedule Site Workflow). How do I restrict users from accessing and changing/deleting the schedule? Or perhaps from running the workflow itself?
Solved! Go to Solution.
Then in the workflow settings you can deselect, Start Workflow Manually. You could also select the "Require Manage Lists" check box to raise the ownership level required to start a workflow, this would mean the user would need to be site owner to start the workflow.
Not sure it's only site owners though:
the workflow will require manage list rights which by default, the minimal SharePoint security permission required is Contributor.
Not sure that any of these are what I'm after. They can't start the workflow manually as it's not associated with a form or list. It is a stand alone 'scheduled' site workflow. This may also be why I can't find the "Require Manage Lists" option in the settings.
I guess the issue is how do a lock a workflow schedule down?
People! Joanne Morris ask how to restrict access to Workflow schedules page. Intresting thing that users with access only with read level can open this page directly and edit it! /_layouts/NintexWorkflow/WorkflowSchedules.aspx
Looks like a bug. They dont have any link to this page, but can open directly. Try it.
Seems logical. The users have Read access, they therefore can Read a page in the layouts folder. If they don't have access to the link, are they really likely to locate the URL and furthermore, do you believe that your users are malicious and would want to make a change to something like this???
I can understand not wanting them to have a link they can follow, you can get plenty of users who would be inquisitive enough to follow a link and -play around with a few settings, but to be able to track down and URL which would almost certainly involve doing research, and then making the change, suggests malicious intent which is not really something you should have to deal with when creating an internal application.