users able to bypass mandatory fields by changing view

[RW-43]

If users open an incident using a view other than 'default' many of the mandatory fields are not displayed and the form does not check for them when resolving the incident.

For example, if an incident is opened using the Self-Service view it can be resolved without entering the Impact, Contact Type, Category, Subcategory, Assignment Group, Resolution Code or Resolution Notes. All of which are mandatory when using the Default view.

The only way around I've put in place so far is a view rule forcing the Default View on all users for this form, however, I can't see that being a solution for all modules.

[sachin_namjoshi]

Hi Ryan,

Changing form view submits form.

You can write your validation with onsubmit client script so that mandatory fields validaiton are not skipped.

Regards,

Sachin

[RW-43]

Thanks Sachin

True, changing the view does submit the form.

However, if the view is changed from the List window the form will display using the new view, disregarding any undisplayed mandatory fields.

I will attempt an onsubmit client script, but would this not require users to 'find' the view containing the required field before being able to submit?

Ryan

[sachin_namjoshi]

You can control view name in your on submit client script so that client script validations will work only for particular view.

Regards,

Sachin

[Sharique Azim]

Suggestion:

Do not let them change views then!