PRIVACY BREACH?
PRIVACY BREACH
Pleae watch this video
https://www.loom.com/share/b27c5c7a74314cd99537036178f7c7b7
I logged in as a limited access user which is linked to my main # and so I only have access to those chats that have the labels I have been assigned.
However, when I type something in the search bar here, I am able to access information from the main # (ending in 3170) to which I do not have access.
I am able to see in the search term information that I then cant access if I hit return. Similarly, if I type in a contact person, I get the entire contact list show up in the search term although I cant get the record page if I choose the,. How is this maintaining privacy?
Technically, this is considered a "Data Leak in Search Metadata." While a user cannot read entire conversations, the ability to see that a contact exists or to read a single snippet of a message from a restricted phone number is a valid privacy concern for organizations with strict isolation requirements.
Log in to comment and vote
Comments1
Nikil Jonnada
May 25
Hey @Christian Steiner (Main) , this issue has been resolved.