Sign in to submit new ideas and vote
Get Started

Limiting attachment access by license

I have run into a situation where I have confidential documents attached to a worksheet row that need to be available to certain personnel. These same worksheet rows are also accessed by personnel that should NOT have access to these documents. I already have hidden the attachment column, and several other columns that need to be hidden, and restricted the visibility of these columns by way of license access. I have just found out that even though there are column access restrictions on designated columns, users can easily just right click on the row (at the margin area) and the option tree comes up with an option to see the attachments. This is allowing critical and confidential information to be accessed by personnel that should not see it, even though the actual attachment column is hidden.

I would like to see the attachments option to be limited to only designated licenses.

Tags:
3
Up
3 votes

Idea Submitted·Last Updated

Comments

  • Unfortunately I think Smartsheet's solution is to pay extra for the Dynamic View add-on, since that provides a way for you to create a view of only certain columns & you can prevent that view from seeing attachments.

  • I have run into a situation where I have confidential documents attached to a worksheet row that need to be available to certain personnel. These same worksheet rows are also accessed by personnel that should NOT have access to these documents. I already have hidden the attachment column, and several other columns that need to be hidden, and restricted the visibility of these columns by way of license access. I have just found out that even though there are column access restrictions on designated columns, users can easily just right click on the row (at the margin area) and the option tree comes up with an option to see the attachments. This is allowing critical and confidential information to be accessed by personnel that should not see it, even though the actual attachment column is hidden. <\/p>

    I would like to see the attachments option to be limited to only designated licenses.<\/p>","bodyRaw":"[{\"insert\":\"I have run into a situation where I have confidential documents attached to a worksheet row that need to be available to certain personnel. These same worksheet rows are also accessed by personnel that should NOT have access to these documents. I already have hidden the attachment column, and several other columns that need to be hidden, and restricted the visibility of these columns by way of license access. I have just found out that even though there are column access restrictions on designated columns, users can easily just right click on the row (at the margin area) and the option tree comes up with an option to see the attachments. This is allowing critical and confidential information to be accessed by personnel that should not see it, even though the actual attachment column is hidden. \\nI would like to see the attachments option to be limited to only designated licenses. \\n\"}]","format":"rich","dateInserted":"2023-06-22T17:27:25+00:00","insertUser":{"userID":162646,"name":"karlj","title":"Program Manager","url":"https:\/\/community.smartsheet.com\/profile\/karlj","photoUrl":"https:\/\/us.v-cdn.net\/6031209\/uploads\/defaultavatar\/nWRMFRX6I99I6.jpg","dateLastActive":"2023-06-28T13:54:40+00:00","banned":0,"punished":0,"private":false,"label":"✭"},"displayOptions":{"showUserLabel":false,"showCompactUserInfo":true,"showDiscussionLink":true,"showPostLink":true,"showCategoryLink":false,"renderFullContent":false,"expandByDefault":false},"url":"https:\/\/community.smartsheet.com\/discussion\/106789\/limiting-attachment-access-by-license","embedType":"quote","name":"Limiting attachment access by license"}"> https://community.smartsheet.com/discussion/106789/limiting-attachment-access-by-license

    Unfortunately I think Smartsheet's solution is to pay extra for the Dynamic View add-on, since that provides a way for you to create a view of only certain columns & you can prevent that view from seeing attachments.<\/p>","bodyRaw":"[{\"insert\":\"Unfortunately I think Smartsheet's solution is to pay extra for the Dynamic View add-on, since that provides a way for you to create a view of only certain columns & you can prevent that view from seeing attachments.\\n\"}]","format":"rich","dateInserted":"2023-06-26T18:06:18+00:00","insertUser":{"userID":161565,"name":"Courtney S.","url":"https:\/\/community.smartsheet.com\/profile\/Courtney%20S.","photoUrl":"https:\/\/us.v-cdn.net\/6031209\/uploads\/defaultavatar\/nWRMFRX6I99I6.jpg","dateLastActive":"2023-07-13T00:54:16+00:00","banned":0,"punished":0,"private":false,"label":"✭✭"},"displayOptions":{"showUserLabel":false,"showCompactUserInfo":true,"showDiscussionLink":false,"showPostLink":false,"showCategoryLink":false,"renderFullContent":false,"expandByDefault":false},"url":"https:\/\/community.smartsheet.com\/discussion\/comment\/382382#Comment_382382","embedType":"quote"}"> https://community.smartsheet.com/discussion/comment/382382#Comment_382382

    @Courtney S.WorkApps should also be able to do this via sharing a report, however the same issue is found

    I have run into a situation where I have confidential documents attached to a worksheet row that need to be available to certain personnel. These same worksheet rows are also accessed by personnel that should NOT have access to these documents. I already have hidden the attachment column, and several other columns that need to be hidden, and restricted the visibility of these columns by way of license access. I have just found out that even though there are column access restrictions on designated columns, users can easily just right click on the row (at the margin area) and the option tree comes up with an option to see the attachments. This is allowing critical and confidential information to be accessed by personnel that should not see it, even though the actual attachment column is hidden. <\/p>

    I would like to see the attachments option to be limited to only designated licenses.<\/p>","bodyRaw":"[{\"insert\":\"I have run into a situation where I have confidential documents attached to a worksheet row that need to be available to certain personnel. These same worksheet rows are also accessed by personnel that should NOT have access to these documents. I already have hidden the attachment column, and several other columns that need to be hidden, and restricted the visibility of these columns by way of license access. I have just found out that even though there are column access restrictions on designated columns, users can easily just right click on the row (at the margin area) and the option tree comes up with an option to see the attachments. This is allowing critical and confidential information to be accessed by personnel that should not see it, even though the actual attachment column is hidden. \\nI would like to see the attachments option to be limited to only designated licenses. \\n\"}]","format":"rich","dateInserted":"2023-06-22T17:27:25+00:00","insertUser":{"userID":162646,"name":"karlj","title":"Program Manager","url":"https:\/\/community.smartsheet.com\/profile\/karlj","photoUrl":"https:\/\/us.v-cdn.net\/6031209\/uploads\/defaultavatar\/nWRMFRX6I99I6.jpg","dateLastActive":"2023-06-28T13:54:40+00:00","banned":0,"punished":0,"private":false,"label":"✭"},"displayOptions":{"showUserLabel":false,"showCompactUserInfo":true,"showDiscussionLink":true,"showPostLink":true,"showCategoryLink":false,"renderFullContent":false,"expandByDefault":false},"url":"https:\/\/community.smartsheet.com\/discussion\/106789\/limiting-attachment-access-by-license","embedType":"quote","name":"Limiting attachment access by license"}"> https://community.smartsheet.com/discussion/106789/limiting-attachment-access-by-license

    @karljI have the same issue. I actually have WorkApps where you should be able to share a report and hide the attachment column (which I have done), yet a user can still right click on the row and view the attachment. I think if a column is hidden, it should not be visible by right clicking on the row. This would solve the issue. In my opinion this is a security issue that should be resolved.

2023-06-22T06:37:29.000+00:00","expand":["all","-body"],"excludeHiddenCategories":true,"type":"Idea"},"discussions":[{"discussionID":107911,"type":"idea","name":"Dynamic View enhancement","excerpt":"I would like to have my external users access Dynamic View without having to give them permissions to the source sheet. I would also like for the email notification sent to the external users when they are tagged in the conversation to contain the link for the Dynamic View rather than the source sheet.","snippet":"I would like to have my external users access Dynamic View without having to give them permissions to the source sheet. I would also like for the email notification sent to the…","categoryID":349,"dateInserted":"2023-07-21T14:36:39+00:00","dateUpdated":null,"dateLastComment":"2023-07-21T15:46:58+00:00","insertUserID":163750,"insertUser":{"userID":163750,"name":"SrinidhiR","url":"https:\/\/community.smartsheet.com\/profile\/SrinidhiR","photoUrl":"https:\/\/us.v-cdn.net\/6031209\/uploads\/defaultavatar\/nWRMFRX6I99I6.jpg","dateLastActive":"2023-07-21T14:36:41+00:00","banned":0,"punished":0,"private":false,"label":"✭"},"updateUserID":null,"lastUserID":163757,"lastUser":{"userID":163757,"name":"laurie_hays","title":"Implementation Consultant","url":"https:\/\/community.smartsheet.com\/profile\/laurie_hays","photoUrl":"https:\/\/aws.smartsheet.com\/storageProxy\/image\/images\/u!1!mwtAH4FR3_o!BOPCAb1G6bw!80ruQLjfFCJ","dateLastActive":"2023-07-21T15:45:00+00:00","banned":0,"punished":0,"private":false,"label":"✭"},"pinned":false,"pinLocation":null,"closed":false,"sink":false,"countComments":1,"countViews":23,"score":2,"hot":3379905817,"url":"https:\/\/community.smartsheet.com\/discussion\/107911\/dynamic-view-enhancement","canonicalUrl":"https:\/\/community.smartsheet.com\/discussion\/107911\/dynamic-view-enhancement","format":"Rich","tagIDs":[363,443,510],"lastPost":{"discussionID":107911,"commentID":386453,"name":"Re: Dynamic View enhancement","url":"https:\/\/community.smartsheet.com\/discussion\/comment\/386453#Comment_386453","dateInserted":"2023-07-21T15:46:58+00:00","insertUserID":163757,"insertUser":{"userID":163757,"name":"laurie_hays","title":"Implementation Consultant","url":"https:\/\/community.smartsheet.com\/profile\/laurie_hays","photoUrl":"https:\/\/aws.smartsheet.com\/storageProxy\/image\/images\/u!1!mwtAH4FR3_o!BOPCAb1G6bw!80ruQLjfFCJ","dateLastActive":"2023-07-21T15:45:00+00:00","banned":0,"punished":0,"private":false,"label":"✭"}},"breadcrumbs":[{"name":"Home","url":"https:\/\/community.smartsheet.com\/"},{"name":"Ideas & Feature Requests","url":"https:\/\/community.smartsheet.com\/categories\/ideas-%26-feature-requests"},{"name":"Smartsheet Product Feedback & Ideas","url":"https:\/\/community.smartsheet.com\/categories\/smartsheet-product-feedback-%26-ideas"}],"groupID":null,"statusID":10000,"attributes":{"idea":{"statusNotes":null,"statusID":10000,"status":{"name":"Idea Submitted","state":"open"},"type":"up"}},"status":{"statusID":10000,"name":"Idea Submitted","state":"open","recordType":"discussion","recordSubType":"ideation"},"bookmarked":false,"unread":false,"category":{"categoryID":349,"name":"Smartsheet Product Feedback & Ideas","url":"https:\/\/community.smartsheet.com\/categories\/smartsheet-product-feedback-%26-ideas","allowedDiscussionTypes":[]},"reactions":[{"tagID":11,"urlcode":"Up","name":"Vote Up","class":"Positive","hasReacted":false,"reactionValue":1,"count":2}],"tags":[{"tagID":363,"urlcode":"Idea Submitted","name":"Idea Submitted"},{"tagID":443,"urlcode":"dynamic-view","name":"Dynamic View"},{"tagID":510,"urlcode":"email-notifications","name":"Email Notifications"}]},{"discussionID":107874,"type":"idea","name":"Add Join\/Collect functionality to Reports","excerpt":"I created a form with logic pertaining to different user groups. Each form entry is a new line item. It would be beneficial to be able to join line items into one line item for a report based on different criteria (i.e. same date submission or user). The current summarize functionality in reports works, but still have…","snippet":"I created a form with logic pertaining to different user groups. Each form entry is a new line item. It would be beneficial to be able to join line items into one line item for a…","categoryID":349,"dateInserted":"2023-07-20T17:49:16+00:00","dateUpdated":null,"dateLastComment":"2023-07-20T18:23:05+00:00","insertUserID":163158,"insertUser":{"userID":163158,"name":"courtney.d","title":"Project Manager","url":"https:\/\/community.smartsheet.com\/profile\/courtney.d","photoUrl":"https:\/\/us.v-cdn.net\/6031209\/uploads\/defaultavatar\/nWRMFRX6I99I6.jpg","dateLastActive":"2023-07-20T19:52:35+00:00","banned":0,"punished":0,"private":false,"label":"✭✭"},"updateUserID":null,"lastUserID":45516,"lastUser":{"userID":45516,"name":"Paul Newcome","title":"","url":"https:\/\/community.smartsheet.com\/profile\/Paul%20Newcome","photoUrl":"https:\/\/us.v-cdn.net\/6031209\/uploads\/userpics\/082\/nQPUTVFKKWDJ2.jpg","dateLastActive":"2023-07-21T18:42:45+00:00","banned":0,"punished":0,"private":false,"label":"✭✭✭✭✭✭"},"pinned":false,"pinLocation":null,"closed":false,"sink":false,"countComments":1,"countViews":20,"score":1,"hot":3379753641,"url":"https:\/\/community.smartsheet.com\/discussion\/107874\/add-join-collect-functionality-to-reports","canonicalUrl":"https:\/\/community.smartsheet.com\/discussion\/107874\/add-join-collect-functionality-to-reports","format":"Rich","tagIDs":[363],"lastPost":{"discussionID":107874,"commentID":386242,"name":"Re: Add Join\/Collect functionality to Reports","url":"https:\/\/community.smartsheet.com\/discussion\/comment\/386242#Comment_386242","dateInserted":"2023-07-20T18:23:05+00:00","insertUserID":45516,"insertUser":{"userID":45516,"name":"Paul Newcome","title":"","url":"https:\/\/community.smartsheet.com\/profile\/Paul%20Newcome","photoUrl":"https:\/\/us.v-cdn.net\/6031209\/uploads\/userpics\/082\/nQPUTVFKKWDJ2.jpg","dateLastActive":"2023-07-21T18:42:45+00:00","banned":0,"punished":0,"private":false,"label":"✭✭✭✭✭✭"}},"breadcrumbs":[{"name":"Home","url":"https:\/\/community.smartsheet.com\/"},{"name":"Ideas & Feature Requests","url":"https:\/\/community.smartsheet.com\/categories\/ideas-%26-feature-requests"},{"name":"Smartsheet Product Feedback & Ideas","url":"https:\/\/community.smartsheet.com\/categories\/smartsheet-product-feedback-%26-ideas"}],"groupID":null,"statusID":10000,"attributes":{"idea":{"statusNotes":null,"statusID":10000,"status":{"name":"Idea Submitted","state":"open"},"type":"up"}},"status":{"statusID":10000,"name":"Idea Submitted","state":"open","recordType":"discussion","recordSubType":"ideation"},"bookmarked":false,"unread":false,"category":{"categoryID":349,"name":"Smartsheet Product Feedback & Ideas","url":"https:\/\/community.smartsheet.com\/categories\/smartsheet-product-feedback-%26-ideas","allowedDiscussionTypes":[]},"reactions":[{"tagID":11,"urlcode":"Up","name":"Vote Up","class":"Positive","hasReacted":false,"reactionValue":1,"count":1}],"tags":[{"tagID":363,"urlcode":"Idea Submitted","name":"Idea Submitted"}]},{"discussionID":107840,"type":"idea","name":"Random Number Function","excerpt":"Add a random number function, its 2023 and this functionality is basic in spreadsheets and has been around for 30 years. It is really incredible Smartsheets doesnt have this functionality.","snippet":"Add a random number function, its 2023 and this functionality is basic in spreadsheets and has been around for 30 years. It is really incredible Smartsheets doesnt have this…","categoryID":349,"dateInserted":"2023-07-20T07:23:51+00:00","dateUpdated":"2023-07-20T07:44:19+00:00","dateLastComment":"2023-07-20T18:28:04+00:00","insertUserID":163669,"insertUser":{"userID":163669,"name":"KeithBCP","title":"Senior Data Manager","url":"https:\/\/community.smartsheet.com\/profile\/KeithBCP","photoUrl":"https:\/\/lh3.googleusercontent.com\/a\/AEdFTp5ZmDwyR9qaat4nfxXkrEcx3fsJJSuiDOeU2CsR=s96-c","dateLastActive":"2023-07-21T09:46:01+00:00","banned":0,"punished":0,"private":false,"label":"✭"},"updateUserID":163669,"lastUserID":118579,"lastUser":{"userID":118579,"name":"Manuel Macias","url":"https:\/\/community.smartsheet.com\/profile\/Manuel%20Macias","photoUrl":"https:\/\/us.v-cdn.net\/6031209\/uploads\/defaultavatar\/nWRMFRX6I99I6.jpg","dateLastActive":"2023-07-20T18:27:12+00:00","banned":0,"punished":0,"private":false,"label":"✭✭"},"pinned":false,"pinLocation":null,"closed":false,"sink":false,"countComments":1,"countViews":39,"score":2,"hot":3379716715,"url":"https:\/\/community.smartsheet.com\/discussion\/107840\/random-number-function","canonicalUrl":"https:\/\/community.smartsheet.com\/discussion\/107840\/random-number-function","format":"Rich","tagIDs":[363],"lastPost":{"discussionID":107840,"commentID":386243,"name":"Re: Random Number Function","url":"https:\/\/community.smartsheet.com\/discussion\/comment\/386243#Comment_386243","dateInserted":"2023-07-20T18:28:04+00:00","insertUserID":118579,"insertUser":{"userID":118579,"name":"Manuel Macias","url":"https:\/\/community.smartsheet.com\/profile\/Manuel%20Macias","photoUrl":"https:\/\/us.v-cdn.net\/6031209\/uploads\/defaultavatar\/nWRMFRX6I99I6.jpg","dateLastActive":"2023-07-20T18:27:12+00:00","banned":0,"punished":0,"private":false,"label":"✭✭"}},"breadcrumbs":[{"name":"Home","url":"https:\/\/community.smartsheet.com\/"},{"name":"Ideas & Feature Requests","url":"https:\/\/community.smartsheet.com\/categories\/ideas-%26-feature-requests"},{"name":"Smartsheet Product Feedback & Ideas","url":"https:\/\/community.smartsheet.com\/categories\/smartsheet-product-feedback-%26-ideas"}],"groupID":null,"statusID":10000,"attributes":{"idea":{"statusNotes":null,"statusID":10000,"status":{"name":"Idea Submitted","state":"open"},"type":"up"}},"status":{"statusID":10000,"name":"Idea Submitted","state":"open","recordType":"discussion","recordSubType":"ideation"},"bookmarked":false,"unread":false,"category":{"categoryID":349,"name":"Smartsheet Product Feedback & Ideas","url":"https:\/\/community.smartsheet.com\/categories\/smartsheet-product-feedback-%26-ideas","allowedDiscussionTypes":[]},"reactions":[{"tagID":11,"urlcode":"Up","name":"Vote Up","class":"Positive","hasReacted":false,"reactionValue":1,"count":2}],"tags":[{"tagID":363,"urlcode":"Idea Submitted","name":"Idea Submitted"}]}],"initialPaging":{"nextURL":"https:\/\/community.smartsheet.com\/api\/v2\/discussions?page=2&includeChildCategories=1&dateInserted=%3E2023-06-22T06%3A37%3A29%2B00%3A00&type%5B0%5D=Idea&excludeHiddenCategories=1&siteSectionID=0&sort=-hot&limit=3&expand%5B0%5D=all&expand%5B1%5D=-body&expand%5B2%5D=insertUser&expand%5B3%5D=lastUser","prevURL":null,"currentPage":1,"total":154,"limit":3},"title":"Trending Ideas","subtitle":null,"description":null,"noCheckboxes":true,"containerOptions":[],"discussionOptions":[]}">