Pain point · Permissions & security · Annoyance
Resetting a dashboard URL leaves its old URL usable
Part of the theme “Dashboard access controls fail for URL and public access” · 2 reports · see them all
1 source thread · first seen 2024-08
Summary
When password-free access is enabled, changing a dashboard's URL does not invalidate the original generated URL, which may let others access the dashboard by guessing its address.
Evidence
Excerpts are copied word for word from the source; follow the link to read it in full.
“when I reset the URL in Dashboard properties, the original default generated URL (number) can still be used”