Manager Approval for Picture

Question

Hello,

My "Employees" Security Role has the ability to write the 'Picture' property on Self only.
Employees are able to edit and delete their own picture, but I want to have managers approve the operation before this happens.

I've set up a business rule as below:

and applied it to all users. However, users are able to change their picture without any approval.

Is there some way for me to set up the Business Rule to require manager approval before changing the picture?

Thanks,
Dan

Comments

Hello Dan,

The Business Rule looks good.

Make sure that the user who is changing the picture is not in the list of Approvers. If an Approver is trying to change the picture, then the action will be performed without any approval request.

Also, can you post a screenshot of the activity scope of your Business Rule?

---

This is the 'Employees' Security Role as well

---

Dan,

The activity scope of a Business Rule is shown below the actions and conditions of that Business Rule:

Can you post a screenshot of the activity scope of your Business Rule?

---

Well, that's embarrassing. I didn't have anything in that scope. I assigned it over all objects and now it's working. :oops:

Thanks for pointing that out.

Answer 1

Alright, new question:

This is the approval email that is sent when someone requests a picture change.

Is there a way to have a preview of the photo that is requested, instead of the hex code?

Comments

Dan,

Unfortunately, currently this is impossible. We will discuss this as a feature suggestion with our team.

---

Is there a location that the uploaded picture is stored, while it waits to be approved? I can't ask our managers to approve photos without being able to preview them before approving.

I tried creating a Business Rule action to send an email with the %thumbnailPhoto% field as part of the body, but unfortunately that returns only a very long string of characters (I assume the code of the photo itself, not any use)

Any help or suggestions you may have that could function as a workaround would be helpful.

Thanks,
Dan

---

Hello Dan,

We suggest the following workaround.

In your Business Rule that sends the operation for approval insert the Run a program or PowerShell script action before the Send this operation for approval action and paste the following script:

$thumbnailPhotoBytes = $Context.GetModifiedPropertyValue("thumbnailPhoto")

# Convert the photo to Base 64
$thumbnailPhotoBase64 = [System.Convert]::ToBase64String($thumbnailPhotoBytes)

$to = "jsmith@domain.com" # TODO: modify me
$subject = "My Subject"
$bodyText = $NULL
$bodyHtml = @"
The image of user %name% (%username%) will be changed to:<br />
<img src='data:image/jpg;base64,$thumbnailPhotoBase64' alt='User image'>
"@

$Context.SendMail($to, $subject, $bodyText, $bodyHtml)

The script will send the modified picture to the email address specified in the $to variable.

So, if you specify a manager's email in the script, he will actually receive 2 emails: one containing the image and sent by the script, and another one sent by the Send this operation for approval action.

---

That's perfect, and exactly what I was looking for. Thanks so much guys!

I implemented this code, and the email works. However, I get the following:

The red X shows up in place of the picture. I'm sure this is something small I'm missing. Any insight?

---

Hello Dan,

What is the version of your Internet Explorer?

---

The server is running IE8, and my workstation is on IE9.

All machines in the company are on at least IE8.

The server running Adaxes is 2008R2.

---

Hello Dan,

This is because Microsoft Outlook does not recognize attachments placed inline of an html message. Our script guy is working on a some sort of workaround for this issue, we'll update you as soon as he comes up with some solution.

---

Sounds good, thanks.

---

Hello Dan,

Here's a modified script:

$smtpServer = "smtp.myserver.com" #TODO: modify me
$to = "user@example.com" #TODO: modify me

# Create an instance of the MailMessage class
$msg = New-Object Net.Mail.MailMessage
$msg.Subject = "My subject"
$msg.From = "nobody@localhost"
$msg.To.Add($to)

$html = {
<html>
  <head>
  <head>
  <body>
    The image of user %name% (%username%) will be changed to:<br />
    <img src='cid:photo' alt='photo'/>                              
  </body>
</html>
}
$view = [Net.Mail.AlternateView]::CreateAlternateViewFromString($html, $null, "text/html");
 # Create attachment
$thumbnailPhotoBytes = $Context.GetModifiedPropertyValue("thumbnailPhoto")
$stream = New-Object System.IO.MemoryStream @(,$thumbnailPhotoBytes)
$linkedResource = New-Object Net.Mail.LinkedResource($stream)
$linkedResource.ContentId = "photo"
$view.LinkedResources.Add($linkedResource)
$msg.AlternateViews.Add($view)

$smtp = New-Object Net.Mail.SmtpClient($smtpServer)
$smtp.Send($msg)

$linkedResource.Dispose()
$stream.Dispose()

---

That works perfectly! Thanks guys, I appreciate the responses and code.