System allows you to select who you are when looking at meeting invite
When I send invites to certain user they get an invite with a link <Select Times to Meet>. If they click the link then they get a question:
"Who are you?" with a list of attendees.
They can then select anyone in the list, impersonate them and vote as them or even worse, impersonate the organizer and cancel the meeting on behalf of the organizer.
Hi Daniel – This is by design in our current solution.
We have several improvements coming which will make it harder to impersonate as others. for e.g Organizers view will require sign sign on.
Finally- the reason we need that landing page today to choose your identity, is because the email goes to multiple attendees from the organizer and they all get the same link. All subsequent reminders and voting emails we send them have personalized links.
this needs absolutely to be fixed. If I send an invitation to three colleaguesi need to know what exactely they preferences are.To us, a system that allows anyone to vote for anyone else is like DODDLE, thus not usable in professional environments.
Basic Solution: FindTime MUST generate an unique id/URL that being clicked in the poll email allows you to vote… just for you (the recipient on the single email !!!!)