This is new and is worrying lots of users trying to quickly share docs which the presume will remain confidential within OneDrive for Business

Hi Christopher-Graves, One of the fun challenges in sharing is that each feature we build will get used by the mom & pop shop of 5 people and also by the enterprise of 50,000 people. It gives a huge breadth of types of users we need to address. When we looked at how we wanted to make sharing work by default, we started with what is still the biggest method of sharing for everyone today: attachments. Anonymous access links are designed to work as closely to attachments as possible (with the additional benefits of being a cloud file). For example, when I send an e-mail containing an attachment to you, there is no "restriction" on that e-mail by default. You can take the mail and forward it to anyone in the world and they can access that attachment as well. Anonymous links are meant to work the same way (You send the link to Bob, and then Bob can share it with their coworker Jill if they need to). Sending a "specific people" link is meant to mirror the scenario of IRM'ing a mail. In that case, the user is making an explicit decision that "this document is for Bob and only Bob. He can't forward it or share it without my express permission". Of course, we want IT to feel like they have control over content which is why we provide all of the settings we have today (and are constantly building more). In a lot of cases, we give IT on/off switches for features to help control exposure. One of the things we are working on adding more of in sharing is the idea of a "default" where users can still get their work done but IT ensures that they are safe by default and make "risky" choices explicitly (instead of by accident). We can make the best end user experiences in the world but if IT turns them off or feels its not safe, then we're not doing our job right. It's a big problem space but we've made a lot of progress in the last few years (and 2017 is shaping up to be just as big in that respect as well). I always love hearing feedback on this type of stuff because it's absolutely critical to nail both ends of the experience. Thanks! Stephen Rice OneDrive Program Manager II

Hi Christopher-Graves, This looks like a bug; I can reproduce it on my end as well. I'll let the team know and we'll take care of it. In general, we want to give users the ability to change permissions as needed. Thanks! Stephen Rice OneDrive Program Manager II

Hi all, Looks like you've already posted the solution but to expand quickly on Salvatore's answer, if you select "Direct" as the default link, users will share by default with the "restricted" link. The dialogue will say something like "Only people on the To: line" or "Only specific people". The one difference between this option and the old "restricted" link option is that users have the ability to permission new users at the same time they e-mail or copy the link. If you have any questions, please let me know! Stephen Rice OneDrive Program Manager II

Sure. In the old sharing dialog, you can copy a restricted link but it assumes you already know who has access and that the person you want to send it to has access. In the new dialogue, we want to make sure that when a user copies or e-mails a link, the recipients will have access. So when the user "copies" a restricted link, we also give them the option to permission new users to the resource. Hope that helps! Stephen Rice OneDrive Program Manager II

Salvatore Biscari, yes, that's correct. Thanks! Stephen

Why does default option sharing OneDrive for Business docs now give link anyone can use to edit?

Salvatore Biscari
Silver Contributor
Mar 07, 2017
Anyway you can change the default in OneDrive admin center.
- StephenRice
  Microsoft
  Mar 13, 2017
  Hi all,
  
  Looks like you've already posted the solution but to expand quickly on Salvatore's answer, if you select "Direct" as the default link, users will share by default with the "restricted" link. The dialogue will say something like "Only people on the To: line" or "Only specific people".
  
  The one difference between this option and the old "restricted" link option is that users have the ability to permission new users at the same time they e-mail or copy the link. If you have any questions, please let me know!
  
  Stephen Rice
  
  OneDrive Program Manager II
  - KRISHNA PHANSE
    Copper Contributor
    Sep 05, 2017
    One caveat to possibly keep in mind is that when people in large organizations start adding people through this feature, it has the potential to bloat security principals (unique ACLs) attached to a site really quickly. This adds to processing overhead for search, retrievals etc, and reduces performance overall. For larger organizations, there may need to be an option to turn this off so we can have one function per dialog i.e. sharing screens/dialogs for sharing only, and permission screens/dialogs for permissions. This would encourage site owners (often power users) to be more conscious of their permission structure and site structure.
escupham
Steel Contributor
Mar 07, 2017
I noticed this as well as it's not the default way we'd like OneDrive files to be shared. You can update this in the OneDrive Admin Center. Under sharing set the default sharing links to 'direct - only people who already have permission'. Then, by default, only those in the 'to' line will have permissions.
- Salvatore Biscari
  Silver Contributor
  Mar 07, 2017
  To be precise, direct links (aka restricted links) give access only to people who already have permissions, as stated in the option.
  This is clearly evident if you choose Get link instead of Share.
jcgonzalezmartin
MVP
Mar 07, 2017
This is the new way of sharing in OneDrive for Business.

Forum Discussion

Why does default option sharing OneDrive for Business docs now give link anyone can use to edit?

Share

Resources