Skip to main content

PRIVACY BREACH?

PRIVACY BREACH

Pleae watch this video

https://www.loom.com/share/b27c5c7a74314cd99537036178f7c7b7

I logged in as a limited access user which is linked to my main # and so I only have access to those chats that have the labels I have been assigned.

However, when I type something in the search bar here, I am able to access information from the main # (ending in 3170) to which I do not have access.

I am able to see in the search term information that I then cant access if I hit return. Similarly, if I type in a contact person, I get the entire contact list show up in the search term although I cant get the record page if I choose the,. How is this maintaining privacy?

Technically, this is considered a "Data Leak in Search Metadata." While a user cannot read entire conversations, the ability to see that a contact exists or to read a single snippet of a message from a restricted phone number is a valid privacy concern for organizations with strict isolation requirements.

Status: Rejected1 comment

Log in to comment and vote

Comments1

  • Nikil Jonnada

    •

    May 25

    Hey @Christian Steiner (Main) , this issue has been resolved.