Well the majority may be doing it but that doesn't make it right. In case of POWL the request ID should be passed as an URL parameter from POWL to the Leave Request application. Can you use Fiddler, HttpFox or HTTPwatch and see whether that is the case and whether the passed request ID is correct?
↧