We had an event where USER A, with export/download permissions created a download link. Then USER B in the same HubSpot account/instance, used the download link to get the data but did not have download permissions.
Anyone else expereienced this?
Hi @toddfrankland1,
I don’t think that this is a topic that should be discussed in the community and indeed escalated with the HubSpot product team. If you experienced this, it’s apparently possible to bypass permissions under certain conditions and whether other community members experience this or not, doesn’t change the fact that it’s a security risk.
Are you on a paid subscription with access to HubSpot support?
Best regards
Thanks for reply
We are on a number of Professional and Enterprise HubSpot products. We invest heavily in HubSpot.
Asking the community about thier experience in regards to such an important issue is the point of the portal, I would assume.