You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
And even if a user does not have access to any resource that has that tag, I think that the tag "string/name" can be seen by the user. For example:
Alice tags a file in space "Special-Projects" with "Project-Three-Letter-Agency"
and "Three-Letter-Agency" is not supposed to be known about in the wider organisation
Brian has access to space "Special-Projects" and can see the tag - no problem
Carol does not have access to space "Special-Projects"
Carol starts to tag a file in one of her spaces. She types "Project-T" and "Project-Three-Letter-Agency" is displayed as a suggestion. (Carol was going to add a tag "Project-Training", and accidentally sees the other tag name)
the information in the tag name has been "leaked" more widely
So users need to be aware that they should not embed "private"/"confidential" information in a tag name.
Steps to reproduce
Expected behaviour
User should know who can see Tags:
Actual behaviour
User does not know that Tags are globally visible
The text was updated successfully, but these errors were encountered: