Workflow "Approval Group" stage can approve records if user has no visibility to sysapproval_group tableIssue If a workflow containing the "Approval - Group" stage is updated by a user that does not have visibility to the sysapproval_group records, the stage will be skipped and the approval approved even though no one has approved yet.CauseWorkflows execute as the user that triggers the workflow processing.Any update can trigger this processing if a workflow is attached to a record.The Approval Group" activity checks if any sysapproval_group record has been actioned to determine if it's approved after that update.The Approval Group activity relies on the approval records in the sysapproval_group table. The Approval Group activity checks for any rejected records, then approved records, then makes a decision.None approved and none rejected = approved in this logic (which evaluates to skipped in the workflow code).The workflow will then progress past the approval stage continuing its flow despite not having been approved.ResolutionIf you are using any Approval workflow stage, ensure all users that can make updates have visibility to the approval records.