[cosyxu]

Good morning Amo,


I was wondering is it possible to get the link to the process diagram, so it can be viewed by a user to see which step the process has gone.

Is there any function or workaround that I can put a link in the email template where the assigned use will be able to search where the process has gone?

I'm using web entry form and action by email function.

Thanks,
Yuan

[amosbatto]

You can put this link in your email template:

Code: Select all

http://example.com/sys@#SYS_SYS/@#SYS_LANG/@#SYS_SKIN/designer?prj_uid=@#PROCESS&prj_readonly=true&app_uid=@#APPLICATION

If the user doesn't have an open login session in ProcessMaker, he/she will be forced to login, but then it should redirect to that page after the login.

If you want to avoid the login, you can provide a link to a custom PHP page that will do an automatic login and attach &sid=$sessionId to the URL. See: viewtopic.php?f=44&t=713852&p=795979#p795983
(Don't do this if you care about security.)

[cosyxu]

You can put this link in your email template:

Code: Select all

http://example.com/sys@#SYS_SYS/@#SYS_LANG/@#SYS_SKIN/designer?prj_uid=@#PROCESS&prj_readonly=true&app_uid=@#APPLICATION

If the user doesn't have an open login session in ProcessMaker, he/she will be forced to login, but then it should redirect to that page after the login.

If you want to avoid the login, you can provide a link to a custom PHP page that will do an automatic login and attach &sid=$sessionId to the URL. See: viewtopic.php?f=44&t=713852&p=795979#p795983
(Don't do this if you care about security.)

Hi Amo,

Thank you very much for the solution you provided.

In my case, most of the users are external users, so I may concern about the security.

Actually, I just found this http://wiki.processmaker.com/3.0/Case_Tracker.

Can I put the tricker link, process id and process pin in the email template for external to log in to track? Do you think this may be more secure? Is there any security concerns regarding the process id and pin?
http://SERVER_ADDRESS:PORT/sysworkflow/en/neoclassic/tracker/login

Thanks,
Yuan

[amosbatto]

If you have external users who don't have accounts in PM, then you will have to use the Case Tracker. You can include the link to the case tracker, @#APP_NUMBER and @#PIN in your email template.

The case tracker can be hacked with brute force attacks since the PIN is only 4 characters long (36x36x36x36 = 1,679,616 possible PINs), but it will take a long time due, because PM only allows a certain number of login attempts before it times out.

[cosyxu]

If you have external users who don't have accounts in PM, then you will have to use the Case Tracker. You can include the link to the case tracker, @#APP_NUMBER and @#PIN in your email template.

The case tracker can be hacked with brute force attacks since the PIN is only 4 characters long (36x36x36x36 = 1,679,616 possible PINs), but it will take a long time due, because PM only allows a certain number of login attempts before it times out.

Thanks for your answer Amo,

Yuan