Skip to main content
kevinolayta
Contributor ⭐️⭐️
Dec 4, 2024 6:58 PM UTC

Report Accessible to anyone with link.

Hello team,

 

Hopefully we can enhance the current security feature for shared reports. We found out that even if you share a report to specific users, once anyone got access to the shared report link. They can access and view all the data and information even if they’re not on the Users list access (even users outside of your company).

 

This is a bit concerning as we cannot remove the possiblity of Human error accidentally sharing a report link that contains critical information of the company.

 

Hopefully this is something we can add/enhance quickly.

 

Thank you!

3 replies

dayn.johnson
VIP ⭐️⭐️⭐️⭐️⭐️
Dec 4, 2024 7:46 PM UTC

This seems like a major security loophole if this is true. ​@Kenneth R, can we get this turned into an idea so it can be upvoted?

Edit -- never mind!

I believe ​@Wayne has the answer below!

Translate
Staff CS Content & Comms Manager, 2x Gainsight CS Ops Product Council Member
Expert ⭐️
Dec 4, 2024 8:17 PM UTC

Anyone from product correct me if I am wrong, but I believe that’s the purpose of turning on OTP(One Time Password) to tie it to your email so no one else can use it.

Translate
Expert ⭐️
Dec 4, 2024 8:19 PM UTC

 

Translate