# File manager serious security issue **URL:** \ **Category:** HubSpot Ideas\ **Tags:** file-manager\ **Created:** [March 13, 2019, 6:16pm UTC](https://community.hubspot.com/t/file-manager-serious-security-issue/13494 "2019-03-13T18:16:09Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![jc](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/jc/32/30239_2.png) [@jc](https://community.hubspot.com/u/jc)\ **Post date:** [March 13, 2019, 6:16pm UTC](https://community.hubspot.com/t/file-manager-serious-security-issue/13494/1 "2019-03-13T18:16:09Z")
Anyone with the lowest level of permissions within a Hubspot portal can delete all Hubspot files in the File Manager. - Anyone can delete all marketing assets - Anyone can delete all sales assets This is very insecure for all Hubspot customers. ---
**Author:** ![Carolynn](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/carolynn/32/14727_2.png) [@Carolynn](https://community.hubspot.com/u/Carolynn)\ **Post date:** [February 11, 2020, 4:39pm UTC](https://community.hubspot.com/t/file-manager-serious-security-issue/13494/2 "2020-02-11T16:39:18Z")
Hey HubSpot, PLEASE give me a way to set permissions on images. I had a Sales Professional user inadvertently delete our logo images & it consequently messed up all of our carefully set up Hubspot email signatures! Of course I didn’t know what the problem was, only that our logo images were gone. Thankfully, our tech support person was able to diagnose what happened & even tell me which user had deleted the images. It is fixed for now, but who knows if/when it could happen again. Carolynn ---
**Author:** ![watanak](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/watanak/32/86368_2.png) [@watanak](https://community.hubspot.com/u/watanak)\ **Post date:** [March 25, 2020, 2:09pm UTC](https://community.hubspot.com/t/file-manager-serious-security-issue/13494/3 "2020-03-25T14:09:50Z")
Empty ---
**Author:** ![MoritzM](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/moritzm/32/43030_2.png) [@MoritzM](https://community.hubspot.com/u/MoritzM)\ **Post date:** [March 31, 2020, 12:13pm UTC](https://community.hubspot.com/t/file-manager-serious-security-issue/13494/4 "2020-03-31T12:13:23Z")
I second what jc and Carolynn state. It’s a potential serious security issue. Please solve this HubSpot. In addition, the level of detail / access Users can see in the Settings section of their accounts should have the ability to be restricted. Best wishes. ---
**Author:** ![lverhagen](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/lverhagen/32/43030_2.png) [@lverhagen](https://community.hubspot.com/u/lverhagen)\ **Post date:** [April 7, 2020, 2:32pm UTC](https://community.hubspot.com/t/file-manager-serious-security-issue/13494/5 "2020-04-07T14:32:57Z")
I did not realise this until recently, and now I am really worried. Please fix this as soon as possible. I think when you say someone doesn’t have marketing access, they don’t have access to ANYTHING that’s normally under marketing. At least, that is what I would expect and also really want. ---
**Author:** ![MoritzM](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/moritzm/32/43030_2.png) [@MoritzM](https://community.hubspot.com/u/MoritzM)\ **Post date:** [April 7, 2020, 2:53pm UTC](https://community.hubspot.com/t/file-manager-serious-security-issue/13494/6 "2020-04-07T14:53:16Z")
I agree with @lverhagen and @jc and @Carolynn It is a serious security issue that could lead a company to move away from HubSpot and choose a competitor. I am shocked such a glaring security isue has been allowed by HubSpot. Such a level of insecurity gets more serious when one considers how many HubSpot Customers will use temporary contractors in their businesses/portals. Please fix this asap, HubSpot! @watanak ---
**Author:** ![watanak](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/watanak/32/86368_2.png) [@watanak](https://community.hubspot.com/u/watanak)\ **Post date:** [April 7, 2020, 3:09pm UTC](https://community.hubspot.com/t/file-manager-serious-security-issue/13494/7 "2020-04-07T15:09:46Z")
Hi everyone, (cc: @MoritzM @lverhagen @jc @Carolynn ) Thank you for continuing to comment on this thread. I wanted to let you know that the team is actively working on addressing this issue. Kie ---
**Author:** ![watanak](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/watanak/32/86368_2.png) [@watanak](https://community.hubspot.com/u/watanak)\ **Post date:** [April 7, 2020, 3:10pm UTC](https://community.hubspot.com/t/file-manager-serious-security-issue/13494/8 "2020-04-07T15:10:04Z")
Empty ---
**Author:** ![MoritzM](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/moritzm/32/43030_2.png) [@MoritzM](https://community.hubspot.com/u/MoritzM)\ **Post date:** [August 18, 2020, 1:03pm UTC](https://community.hubspot.com/t/file-manager-serious-security-issue/13494/9 "2020-08-18T13:03:26Z")
Has this issue been resolved yet? This is rather disappointing security flaw. Kind regards. ---
**Author:** ![MoritzM](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/moritzm/32/43030_2.png) [@MoritzM](https://community.hubspot.com/u/MoritzM)\ **Post date:** [September 4, 2020, 2:20pm UTC](https://community.hubspot.com/t/file-manager-serious-security-issue/13494/10 "2020-09-04T14:20:03Z")
@watanak can we have an update regarding our messages? Kind regards. ---
**Author:** ![cjmil](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/cjmil/32/13521_2.png) [@cjmil](https://community.hubspot.com/u/cjmil)\ **Post date:** [October 29, 2020, 6:41pm UTC](https://community.hubspot.com/t/file-manager-serious-security-issue/13494/11 "2020-10-29T18:41:35Z")
This is a serious issue for our organization as well - the lack of file permissions is shocking. We are running into significant issues around access to sensitive information with this. This needs to be escalated and addressed asap @watanak ---
**Author:** ![MoritzM](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/moritzm/32/43030_2.png) [@MoritzM](https://community.hubspot.com/u/MoritzM)\ **Post date:** [October 30, 2020, 11:38am UTC](https://community.hubspot.com/t/file-manager-serious-security-issue/13494/12 "2020-10-30T11:38:32Z")
@cjmil agreed. I still cannot believe HubSpot has not resolved this ongoing issue. One can see from this thread, HubSpot was made aware back in March 2019 and it was revisited in April 2020 by myself and others. @watanak are you going to at least acknowledge HubSpot customers messages here? ---
**Author:** ![hhiggins](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/hhiggins/32/32091_2.png) [@hhiggins](https://community.hubspot.com/u/hhiggins)\ **Post date:** [September 29, 2025, 5:30pm UTC](https://community.hubspot.com/t/file-manager-serious-security-issue/13494/13 "2025-09-29T17:30:44Z")
Hello! My name is Hallie and I’m a Program Manager on the CXM Team. There are permissions available for ‘view’ ‘edit’ and ‘delete’ for Files in the File Manager, under the ‘Marketing’ tab in a user’s permissions, as seen here. This helps minimize who can and cannot delete files that are stored in the File Manager. 🙂 ![Screenshot 2025-09-29 at 1.29.12 PM.png](https://d2qpr2jzcazej7.cloudfront.net/original/3X/6/4/647b4ed5f4a3663754402e2a6bfe020e236108ed.png)