Single click on email link to accept/reject a record

dormarchan
Mega Contributor

Hi,

Is there a way to click a link on email to initiate an UI action or a script to set the state of a record?

My requirement is to accept/reject a proposed solution of a record. The only way I can think of is to invoke the Approval table via WF and have the 'mailto' function in the Email Notification. When the 'approve' or 'reject' link is clicked, it opens an outlook email file with pre-defaulted subject and the watermark. The stakeholder says that it was 2 click and not 1 click.

Any tips or leads is appreciated.

Thanks in advance for your help.

Regards,

Dor

10 REPLIES 10

Chuck Tomasi
Tera Patron

Hi Salvador,



A one click approval is only possible if you take the user to the exact URL to do the action. Yes, it's possible. I'm sure some could build you a UI page to do that and you can embed the URLs in your emails.



However, it brings up security risks - in my mind anyway. Is this UI page available to the public? If so, what's to stop someone (possibly Cc'd on a notification) from clicking the link, or walking up to the manager's desk and clicking it to approve something? If you make it non-public (the user needs to authenticate), now you've defeated your one click methodology.



Lots to think about.



I believe you can do this using push notifications on the mobile devices, but I have not tried it.


Hi Chuck,


I was thinking of security as well. But I need to build a case that this may be a potential security issue. What I see in wiki are mostly query URL and not any trigger-type URL. Could you please give me a example target URL to such possible one-click trigger action? I'll just want to experiment from that URL.



Thanks,


Dor


Hi Salvador,



I don't have an example off hand. You would have to build it. It includes:


  1. A public UI page capable of receiving parameters for the approval record ID and the response (approval or rejection)
    1. This page would update the record per the URL args
  2. Notifications with links that construct that URL for the two accept/reject links


The security risk is that anyone could submit a URL from their desktop browser with the right URL and approve or reject items without any authentication because it's wide open.


Let me know if that answered your question. If so, please mark it as correct so that others with the same question in the future can find it quickly and that it gets removed from the Unanswered list.


If you are viewing this discussion from your "inbox", use the "mark as correct" option under actions. If you are viewing it directly from the thread use the Correct Answer link (red with a star).


Thank you