secure our 2-stage approval application using SharePoint & Power Apps & Power Automate

john john 1,021 Reputation points
2022-07-30T22:08:19.183+00:00

We have a travel request application. where a user submit a request where it should go into 2 stages of approval process before it gets Final Approval.

Now we did the following:-

1) Create a SharePoint list which contain those fields; Title, Description, StareDate, EndDate, FirstApproval (the requestor direct manager), SecondApproval (the requester regional approval), Statues (system-generated with those options; open, first-approved, second-approved, Final-Approved).

2) Power Apps, which send emails to the first-approval and the second-approval users , and show-hide the Approved & Reject buttons based on the item status.

3) Power Automate,to set item-level permissions, so for example when the item needs first-approval only the approval's direct manager can edit the item, while all stakeholders can read-only.

Now the process is not 100% secure, as a requestor using API call or using SharePoint built-in forms, can easily create a new request and define its status as Final-Approved. so in other words the requestor can bypass the Power Apps business logic. so how we can secure our process? so if an item has a status = "Final-Approved", then we can 100% sure that it actually went through the 2 approvals users? Thanks

Community Center | Not monitored
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Anonymous
    2022-07-31T12:31:32.983+00:00

    Power apps is not currently supported here on Q&A. The product group for Power apps actively monitors questions over at
    https://powerusers.microsoft.com/t5/Power-Apps-Community/ct-p/PowerApps1

    --please don't forget to upvote and Accept as answer if the reply is helpful--


  2. Rijwan Ansari 766 Reputation points MVP
    2022-07-31T13:31:13.037+00:00

    Hi @john john

    Please post the question into power apps community.

    However, in your case, you can create customize the list form using power apps and apply logic to show/hide/enable/disable fields/section based on conditions.

    I have done something like that in this video.
    https://www.youtube.com/watch?v=vzi4NLvBxDY


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.