When a signatory is unavailable we tried to reassign a field for a document already sent out for sign requests.
When reassigning we assumed it would change the name of the User assigned and also the Signature it would request would be of the user we re-assigned it to.
After re-assigning the field an error message appeared saying "email already assigned" because the email we tried to reassign to was already a signatory for another field on the same document.
When the new user who the field was reassigned to tried to sign the field, it was the initial users signature that appeared. this is a big critical breach in security as the a preparer of a document can simply reassign other signatories fields to himself, and when he signs the document it would be the signatures of the individuals he initially assigned the fields to that would be placed on the document.
We urgently need this bug rectified like yesterday. the risk is far to great to allow this to persist into next week.
Comments
Hello,
Thank you for reaching out to the DocHub community.
Please note that documents that are already sent for "sign request" can no longer be modified. You will need to create a copy of the sent document so that you can edit and reassign the fields to your liking. Once you open a document from the "sent" tab of your DocHub account, click the more options icon at the top right corner of the page, select "actions" then click "make a copy". See the screenshots below for your reference.
A pop-up window will appear after clicking the "make a copy" option. Make sure to tick the box for "clear signature fields" so that the new copy will have blank fields for signature. Then click the "create copy" button.
If you have any other questions, please feel free to let us know.
Please sign in to leave a comment.