Enhanced Privacy and Access Control for Clip 3.0 in ClickUp
closed
Samuel Schneider
Firstly, I'd like to extend my gratitude for the introduction of the innovative Clip 3.0 feature in ClickUp. It's a fascinating addition that significantly enhances user interaction and productivity within the platform. However, after exploring its capabilities, I've identified a CRITICAL limitation regarding privacy and security that needs addressing.
The issue at hand is the public visibility of shared links for screen recordings made with Clip 3.0. Given the nature of the work we conduct within our ClickUp workspaces, some of the information shared via these clips can be highly sensitive and ought to be restricted to specific individuals or teams within a workspace. Currently, anyone with the shared link can access the recording, even without logging into ClickUp, simply by using the link in an incognito browser window. This loophole poses not only a significant privacy concern but also a potential breach of data protection regulations, which could have serious implications for our operations.
To mitigate this risk and ensure that sensitive information remains confidential, I propose the following enhancements to the Clip 3.0 feature:
Workspace-Level Access Control: Introduce settings that allow Clip 3.0 recordings to be visible only to members of the workspace. This ensures that only authorized personnel can access the content.
Granular Access Permissions: Implement more detailed access settings, enabling content creators to specify which individuals or teams within the workspace can view a particular clip. This feature would be invaluable for projects that involve sensitive or confidential information.
Mandatory ClickUp Authentication for Clip Access: Ensure that accessing a Clip 3.0 recording requires logging into ClickUp, thereby preventing unauthorized external access through shared links.
Addressing these privacy and security concerns should be a high priority, not only to safeguard sensitive information but also to align with data protection standards. Implementing these enhancements will not only fortify the privacy of Clip 3.0 recordings but also strengthen the overall security posture of the ClickUp platform.
Thank you for considering this feature request. I believe these improvements will significantly enhance the utility and security of Clip 3.0, making it an even more valuable tool for collaboration within ClickUp.
Log In
Louise Ewing
closed
Louise Ewing
Hi Samuel!
We are currently working on an option to have all attachments and Clips URLs behind Workspace authorization. This means that once we ship this functionality URL’s will only be accessible by users logged into your ClickUp Workspace.
This enhancement to how we manage attachments will be available on all ClickUp plans and will apply to both newly created and existing attachments.
We recommend following the Canny post linked below where our Product team is regularly posting updates.