Expense Management Security Issues

Suzanne Moore

Anyone else happen to notice today that all users seem to default to self approve , and not to the approval rule they are assigned to? Nice security update Blackbaud (see what's new dated May 8) - do an update that completely obliterates all security and don't tell anyone first!!!!!

Dan Hout-Reilly

@Suzanne Moore We have noticed the change, but thought it was limited to Admins, who are now defualting to the Self Approve approval rule. I added the Created By column to the Invoices screen in Payables to try and catch if anyone uses the Self Approve rule by mistake. (The Created By column shows the name of the last person to approve the Expenses request). I'd love for the defaul approval rule noted in the Expenses user settings to actual be the default, even for Admins. I beleive this is the way it was, until the most recent change. It is very Blackbaud to implement a change without knowing how it will impact the rest of the system and its users.

Kevin Brazell

@Dan HoutReilly
For admin users, at least my user , self approve always has defaulted even though my user has a “default” approval rule. If you don't want someone self approving at all, and they don't “need ” admin rights, I'd change their security setting from admin to a user with security groups / roles. This way they can't choose self approve unless you manually give them that security. Also then their default approval rule that can be set under their user in EM, will always default in the approval rule box. Food for thought.