ISSUE: When you edit data from a report, it is possible to show a column for a custom data field that is not present on all of the report results.
If this data field is updated on an item that does not have a form on it, workfront will choose a seemingly random form with that data field, and attach it without confirmation or even a warning afterwards.
CASE STUDY: At our company someone filled out a field called "installation location" from a report. It attached a random form with that field onto 40 items (not the right form for the topic). The random form also had a field called "include in manufacturing dashboard" defaulted to "yes", so it also caused 40 items to end up on a dashboard incorrectly.
FIX: Workfront should require authorization for ALL form attachments and NOT attach forms in the background without notifying the user.