Evangelos Malandrakis
11/06/2024, 4:06 PMR
and a child workspace C1
. There’s a group of admin users AG
with access to R
, which also gives them access to C1
due to hierarchical permissions. Then, there’s a different user group C1G
specific to C1
.
The issue is that when a C1G
user tries to schedule an export in C1
, they can see the AG
admins and add them to the recipient list. This doesn’t seem quite right, since they shouldn’t really have visibility of those R-level admins.
Does this sound like something we should look into fixing to limit visibility?
Thanks in advance!Ivana Gasparekova
11/06/2024, 4:48 PMIvana Gasparekova
11/06/2024, 4:48 PMEvangelos Malandrakis
11/06/2024, 5:02 PMC1G
would see others within the same group. However, what’s puzzling to me is why they can also see users from groups that only have access to C1
through hierarchical permissions.
Conceptually, it makes sense for admin users (AG
) to have visibility of all workspace members. But for regular users in C1
, it seems they shouldn’t need to see which admins have access due to hierarchy, as this information might not be relevant to them.
Does that perspective make sense? 😊Ivana Gasparekova
11/06/2024, 5:08 PMEvangelos Malandrakis
11/06/2024, 5:13 PMIvana Gasparekova
11/06/2024, 6:08 PMProductboard
11/19/2024, 12:32 PM