Recent searches
No recent searches
Admins should see ALL Dashboards - even if not shared to them
Posted May 25, 2021
USE CASE: The VP of Support (who is also the admin) needs to see what dashboards have been published to ANYONE so that he/she is aware of what data is being communicated and to whom.
This ability is missing and is a gigantic security hole. What if, for example, by design, or oversight, someone creates a dashboard of all defect tickets and shares that externally to a partner, or worse a competitor. There is absolutely no way to audit this right now.
You MUST give admins the ability to see the list of ALL dashboards - even if that dashboard has not been shared to the admin. Admins may need to adjust sharing or just plain remove them.
THIS IS A GIGANTIC SECURITY HOLE THAT MAKES IT EASY TO LEAK SENSITIVE DATA.
46
39 comments