Guest user can see “Shared with” information on shared collection page 🔵

When accessing a shared collection as a guest user, the page displays the “Shared with” field, including the email address used for sharing. This information should not be visible to guest users

Steps to Reproduce

  1. Log in as an admin user.

  2. Open a collection

  3. Share the collection with an external email address

  4. Open the shared collection link in an incognito window

  5. Observe the collection details section

    Expected Result: Guest users should not see internal sharing details, including the “Shared with” field or associated email addresses

    Actual Result: The “Shared with” field and the email address are visible to guest users on the shared collection page

Please authenticate to join the conversation.

Upvoters
Status

Queued For Dev

Board

🐛 Report an Issue

Tags

Medium Priority

Date

About 2 months ago

Author

Svitlana

Subscribe to post

Get notified by email when there are changes.