May 25 2020 03:50 AM
Hi
I have a situation where Guest users can see content they have not been given access to.
Situation:
- I have an MS Team
- It has two Private Channels: Alpha and Bravo
- A guest users is added to Alpha but can see the content in Bravo via one of two methods:
Has anyone had issues with this or know of a fix? I'm guessing its a sharepoint permissions issue specific to guest users?
May 25 2020 04:00 AM
May 25 2020 05:00 AM
Scenario - we have a team - lets call it Blue Team. In it are a series of projects. Each project has its own private channel.
People in the channel are a mix of employees and consultants (guests). We have found the guests can access the "Files" (sharepoint saved content) of the various private teams, even though they have not been given membership.
They are all private channels, the general folder is 100% empty and was never used and the Guests are definently not in both channels
May 25 2020 07:40 AM
@SamG_A Is the first picture you have attached from the guest user? If so it looks like the guest user is member of both private channels since they are both visible in the team.
May 25 2020 07:59 AM
May 25 2020 04:55 PM
May 25 2020 10:33 PM
Solution@adam deltinger We resolved the issue.
Team Bravo was originally created before Private Channels came into existence last year. The original channel was a public channel.
After private channels came out the follow happened:
Unbeknownst to us, the public channel Files content is not deleted from Sharepoint when a channel is deleted in Teams.
What was happening is that new guest users were able to access this residual public channel content. It appeared like current private team content because it had the same name and content up to the date is was migrated.
May 25 2020 10:33 PM
Solution@adam deltinger We resolved the issue.
Team Bravo was originally created before Private Channels came into existence last year. The original channel was a public channel.
After private channels came out the follow happened:
Unbeknownst to us, the public channel Files content is not deleted from Sharepoint when a channel is deleted in Teams.
What was happening is that new guest users were able to access this residual public channel content. It appeared like current private team content because it had the same name and content up to the date is was migrated.