There are some good reasons not to send sensitive documents as attachment in an unencrypted email. But this is exactly what Filr does. If user A shares a document with user B then user B can activate a subscription to get an email with the changed document as attachment. Imho this a very serious security vulnerability as neither an administrator nor the file owner can prevent/control this. I would suggest to enable the administrator to completely deactivate this function.
by: Michael V. | over a year ago | Administration
Comments
If this is the case then it probably is in conflict with GDPR for files containing personal data.
That's why I've mentioned this. If this is the case we probably have to shut down the filr services...
Setting the outbound mail quotas, withing the administration console/email to 0 appears to prevent attachments being added to the notification emails.
Thanks Robin.
Michael/fgh.t: please let know if this helps?
Hi Robin, yes this is a good workaround. Thanks for the hint.
Michael