Sorry, we don't support your browser.  Install a modern browser

Less permissions for invitees#583

In order for folks to access a private wiki, they need to give all the same permissions as though they are creating a wiki. Some users do not wish to give full access to their Google Drive and only want to be able to browse wikis they were invited to. Even the app does not actively access folks’ Drive willy nilly, it is still a valid security concern as folks store all kinds of potentially sensitive info on drive.

Ideally, authentication is instead in two layers:

  • (Default, viewer) No major permissions to sign in and view wikis one is invited to
  • Once a user suggests they want to create or edit a wiki, necessary drive permissions are requested.

Would require handing to ensure a user can switch betwen these two “layers” in the event they want to gain or lose wiki editing/creation features.

Thanks for the consideration!

2 months ago