Unprotected Attachments - Security Issue

#1

@Jovana:
As already discussed here and an roadmap item created here:
Attachments are not protected, which means anyone with the attachment link can access them. They don’t have to be logged in to infinity and to have the permission to view.

I want to store contracts with confidential data, but I better not do this until this is solved.

0 Likes

#2

Hi @micck, after checking out your reply in the ‘File name for attachments’ I actually spoke to our product manager and she told me that this should be working now without any security problems. However, after checking, I noticed this is not the case. So it turned out that there was an oversight on our dev team’s part and the task is back in their hands.

After getting this information I completely forgot updating you on that other topic although I was planning to. I will post this same answer in there as well asap.

Thanks for the reminder!

1 Like

#3

Just got an update from the support team. The team is already working on the issue atm. :smiley:

2 Likes