Pain point · Permissions & security · Causes churn
Anyone can open any dashboard by changing the URL
2 source threads · first seen 2018-07 · last seen 2020-07
Summary
Dashboard URLs are not access controlled per dashboard, which exposes sensitive content such as embedded HTML or iframes to clients.
- Affects
- organizations with many sub-groups and sensitive client data
Evidence
Excerpts are copied word for word from the source; follow the link to read it in full.
“Currently, anyone can access any dashboard by just changing the URL”
“After giving Gamma role access to users, users are not able to see any dashboard”