Do not expose references at all!
The documentation about reference badges says:
"To minimise the risk of exposing sensitive information, existing relationship fields will by default only show the main field. By default, this field will typically contain the first field of the item (though the logic is a little more complicated to ensure there is always some field being shown)."
We definitely need to have the option to NOT EXPOSE the list of referenced items at all, particularly if the referenced app comes from a workspace that someone is no member of. It is probably common to have a link from a private, internal workspace to a workspace that is shared with partners or customers, for example a joint contact list. On the other hand, they should not see the list of all opportunities, communication, or whatever we save internally about the shared items. It is not enough that they cannot access the item in the end. It is also no good experience to show the partners our internal information, at least a headline, and if they try to access it, they get the message to not have the rights. We definitely need to the option to not expose these information at all.
Please sign in to leave a comment.
Comments
1 comment