Workflow Security

All workflow blocks are processed according to the permissions of the with workflow owner. This effectively means that:

  • Expressions are calculated with the workflow owner's permissions

  • Functions are called by the server, but with the workflow owner's permissions

  • Action are launched from server, but with the workflow owner's permissions

Thus, the workflow may access only data that is accessible by its owner.

If you create a copy of a certain workflow under another user account, the copy may not function properly if the new workflow's owner has no permissions to access data referred by the bindings of the cloned workflow.

Workflow Modification

Only users that have Administrator effective permission level in the workflow context may modify workflow configuration. This ensures maximum security for the potentially dangerous workflow operations.

Was this page helpful?