Forum Discussion
Share a folder with ALL the organization, not specifying each member
- Aug 13, 2018
Hi all,
Figured I'd pop in here and hopefully provide some clarity (and if there's a bug somewhere, I definitely want to know that too!)
- You can only have one link of each type (one anonymous edit, one anonymous view, one organization edit, one organization view). Links that work for specific people are a little bit different.
- The browser URL is a kind of "existing access" link in that anyone that we know has the link will be able to use the browser link. There may be some cases where browser links won't work or will do something funky (extra parameters, etc.)
- OneDrive & SharePoint both follow a principle of "greatest level of access". When you click on any link to an item (regardless of its scope or permission), we will give you the highest level of access you have on that item (that we know of).
- For example, if I send Erik a view link and then an edit link, even when he clicks on the view link, he'll have edit access.
At this point, I expect you're wondering how ODSP "knows" what you have access to. First, if a user is unauthenticated & clicks on an anonymous link, we obviously don't know that you have access to it. For other cases, we know if you've accessed a link when:
- You use the "Quick send" (e-mail) flow in the sharing dialog
- We (ODSP) sent the mail so we "know" that you intended for the recipient to be able to access it
- To make things work as easily as possible, the recipient can now find the item in Shared With Me and, if they click on an existing access link, it will also work
- The recipient clicks on a sharing link
- If you send the link via some other mechanism (let's imagine you copied it to your clipboard), we don't know when the recipient actually receives the link. You may be copying it to put in a document you haven't sent out, or as part of an e-mail that you're drafting
- Once the user has clicked on the link, we now know that they have it (obvious statement is obvious :) ) and so we mark the user as using that link
Hopefully, that helps clear things up! If you have any more questions, or you followed the above steps and something still didn't work, let me know!
Stephen Rice
OneDrive Program Manager II
Two common things I see happen on this case that would cause that.
1. The user getting access denied is already logged into a non work Microsoft account in the browser session and when they click that link they get access denied because they are not in the org with that account.
2. Probabaly not the case but I’ve seen people click their sharing link to look at a file then they will copy the URL from the browser and send that to someone to access bot realizing that URL isn’t the same as the sharing URL. Once you click a sharing url you go through some kind of link security check where it can add you to that list of users that accessed and added to permission of folder then redirected into the direct OneDrive/Sharepoint url.
- Erik CollardAug 09, 2018Copper Contributor
Hi Christopher,
Thanks for your help on this. The first reason seems relevant but from seeing it yesterday, it was not the case. I'm more curious about the expiry you mention in the beginning. I didn't set any expiry, but can it be something set by our IT department, for security reasons for example ? Is there any way to check the expiry of a sharing link ?
Thanks a lot !
Regards,
Erik
- DeletedAug 09, 2018There is a default expiry setting in the admin center. I've never turned it on to see if it actually shows that expiry to the client. You can't really see the expire notice on the sharing link in the UI from what I've seen, just the ability to remove it.
- wrootAug 10, 2018Silver Contributor
I haven't checked fora while, but expiry setting was only meant for anonymous links. I don't think organization wide sharing is classified as anonymous.
I have no other theories, but i can tell you that OneDrive is very confusing with sharing. Not just for my users. I often can't understand why some links work and other don't. A week or so ago one user shared a folder for another users and she couldn't access it, until i have removed a link and did the same thing again. And the second link worked this time. I will have to check that "copying a link from the browser" part next time i encounter such issues.