scriptrunner getWorkflowButtons.call() token problem

[laurent vanhalle]

I made a scripted workflow postfunction to send email to reviewer. inside the email, I used getWorkflowButtons.call() to display workflow buttons for reviewer to approve/reject. it works well if no special permission setup.

the button by default point to an URL with token inside, but when reviewer receives email and click the button, it always show token missing error "XSRF Security Token Missing". How can I get this error resolved? (although retry works, but the user experience is bad.)

Thanks!