There are some good reasons not to send sensitive documents as attachment in an unencrypted email. But this is exactly what Filr does. If user A shares a document with user B then user B can activate a subscription to get an email with the changed document as attachment. Imho this a very serious security vulnerability as neither an administrator nor the file owner can prevent/control this. I would suggest to enable the administrator to completely deactivate this function.

Comments

  • If this is the case then it probably is in conflict with GDPR for files containing personal data.

  • That's why I've mentioned this. If this is the case we probably have to shut down the filr services...

  • Setting the outbound mail quotas, withing the administration console/email to 0 appears to prevent attachments being added to the notification emails.

  • Thanks Robin.

    Michael/fgh.t: please let know if this helps?

  • Hi Robin, yes this is a good workaround. Thanks for the hint.
    Michael