Question:

Does the Prompt for Document Fields action in OneWorkflow allow users to override Field-Level Security rules in Vault?

Answer:

Yes.  In OneWorkflow, the Prompt for Document Fields action on document workflows does not honor Field-Level Security rules.  This is Working as Designed.  When this workflow action is configured, a user who does not have Edit permissions on a document field is able to edit the document field on documents within the workflow.

This action can be configured in two places within the workflow configuration:

• In the Start Step configuration, Prompt for Document Fields is an available control type that prompts the workflow owner to populate values for select document fields. 
• In a Task Step configuration, Prompt for Document Fields is an available setting that prompts the task owner to populate values for select document fields.

Related Documentation:

Vault Help Documentation: Configuring Field-Level Security on Documents

Vault Help Documentation: Configuring Document Workflows