Try in workspace - Security Issue

Avatar

Avatar

JoeBlackwell

Avatar

JoeBlackwell

JoeBlackwell

23-10-2017

Hi

I have previously raised this point but it didn't get much attention.

We are very keen to share workspace wider with our users however we want to do this in a controlled way using curated projects. We don't want all users to have complete un-curated access. We wouldn't give everyone access to ad-hoc and workspace is now more powerful.

However we have found that users have found a way to bypass their access levels and create un-curated projects when they shouldn't be able to. They can do this just by clicking the 'Try in workspace' button in R&A. This gives them a completely unrestricted access to workspace when they shouldn't be able to. When we have external agencies able to do this then it is potentially breaking all sorts of data security processes.

Joe

2 Comments (2 New)
2 Comments

Avatar

Avatar

ericmatisoff

Employee

Avatar

ericmatisoff

Employee

ericmatisoff
Employee

23-10-2017

Hi JoeBlackwell​  - thanks for submitting this idea, I agree full access is not something you would want to provide. I wanted to make sure you're aware of two features (one available now, one coming on Thursday, October 26):

1 - Available now, you can limit access to metrics and dimensions at a User/Group level via User Management. This way, if there's a need to deny access to certain events/evars/props, this can be done at a level deeper and more secure than curated workspaces. Customize Metric Permissions and Customize Dimension Permissions

2 - On 10/26, we're releasing a feature to easily curate the metrics/dimensions available at a Virtual Report Suite level: Early Access - Adobe Experience Cloud Release Notes

Hopefully one of these two options will make life easier for ya.

Avatar

Avatar

jantzen_belliston-Adobe

Community Manager

Total Posts

1.9K

Likes

312

Correct Answer

570

Avatar

jantzen_belliston-Adobe

Community Manager

Total Posts

1.9K

Likes

312

Correct Answer

570
jantzen_belliston-Adobe
Community Manager

27-10-2020

 
Status changed to: Archived