David Allinson Mr

There should be a centralised workflow duty with all privileges related to workflow in a single duty instead of spread sporadically through other duties within the security model.

Locating a single privilege or duty relating to workflows within the system is a task that takes time to identify and test.

With a single duty with all privileges related to workflow in a single location would make it so much easier to customise security roles.

Currently in D365F&O a Purchase Requisition submitted to the workflow can be edited by the Approver before approving the Purchase requisition. This behaviour increases the risk of a fraudulent transactions being processed especially if the approver can change the Vendor Account to be that of an employee vendor (e.g., those used for employee reimbursements') prior to approval. Items submitted to the workflow across the entire system should not be able to be edited by anyone unless it's recalled to DRAFT.