# Restrict access to File Manager

**URL:** <https://community.hubspot.com/t/restrict-access-to-file-manager/16731>\
**Category:** HubSpot Ideas\
**Tags:** file-manager\
**Created:** [October 14, 2019, 3:46pm UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731 "2019-10-14T15:46:26Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![maris7](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/maris7/32/32521_2.png) [@maris7](https://community.hubspot.com/u/maris7)\
**Post date:** [October 14, 2019, 3:46pm UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731/1 "2019-10-14T15:46:26Z")

</div>

Hi,

The File area should give the ability to restrict access to folders based on Users&Team,

so that the sales team do not messes with marketing files, and some content can be restricted based on users or team

ex: area for investors → files should not be viewable by any sales trainee working in HubSpot

thanks

---

<div class="post-metadata">

**Author:** ![SeektheKingdom1](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/seekthekingdom1/32/8009_2.png) [@SeektheKingdom1](https://community.hubspot.com/u/SeektheKingdom1)\
**Post date:** [October 30, 2019, 6:08pm UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731/2 "2019-10-30T18:08:15Z")

</div>

Yes I agree, this is a huge concern for us. A basic user has access to delete our website files, this would cause so much damage. They might simply be trying to eliminate files thinking they don’t need them.

Also, when they add files from a record, it adds to the main file database, which will clutter the files and give all users access to sensitive files. We need to restrict total access to the file manager, but allow attachments to records that will not be hosted in the file manager. Also, creating folders for attachments in each record would be extremely beneficial. Thank you

 ![Screenshot 2019-10-30 12.44.39.png](https://d2qpr2jzcazej7.cloudfront.net/original/3X/2/1/2131e9444ff7b7b994a2155fe6966d9865f0cae3.png)

---

<div class="post-metadata">

**Author:** ![Shera2019](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/shera2019/32/31639_2.png) [@Shera2019](https://community.hubspot.com/u/Shera2019)\
**Post date:** [November 25, 2019, 9:15pm UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731/3 "2019-11-25T21:15:28Z")

</div>

Yes! I completely agree. I want to send personalized emails from different users with a PNG or JPEG of their signatures, but its very tricky because I don’t want eveyrone utilizing our platform to have access to those signatures. Itt would be great to be able to seaparte them out by team.

---

<div class="post-metadata">

**Author:** ![NicuEnache](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/nicuenache/32/75439_2.png) [@NicuEnache](https://community.hubspot.com/u/NicuEnache)\
**Post date:** [February 7, 2020, 9:53am UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731/4 "2020-02-07T09:53:35Z")

</div>

Totally agree!

---

<div class="post-metadata">

**Author:** ![amousinho](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/amousinho/32/47092_2.png) [@amousinho](https://community.hubspot.com/u/amousinho)\
**Post date:** [February 26, 2020, 9:54am UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731/5 "2020-02-26T09:54:08Z")

</div>

Yes I agree. This is a security incident that HubSpot has, because the entry “Files” is available for all users and we’ve confidental information and sensite data there.

This must be solved as soon as possible!

---

<div class="post-metadata">

**Author:** ![amousinho](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/amousinho/32/47092_2.png) [@amousinho](https://community.hubspot.com/u/amousinho)\
**Post date:** [February 26, 2020, 10:03am UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731/6 "2020-02-26T10:03:12Z")

</div>

Hello,

I’ve found that all users in HubSpot have access to “Files”, and we’ve there confidential information and sensitive data. This is a security incident and ubSpot doesn’t have the permissions to restrict the access.

This is a situation that is urgent to solve! User Access Management is a principle that HubSpot should follow. Where is the privacy by design?

---

<div class="post-metadata">

**Author:** ![ctyriver](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/ctyriver/32/229965_2.png) [@ctyriver](https://community.hubspot.com/u/ctyriver)\
**Post date:** [March 12, 2020, 5:57pm UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731/7 "2020-03-12T17:57:32Z")

</div>

Please tell me this is not still true. Why would a user who has no Marketing access be given rights to delete website files?

HubSpot please say it isn’t so. I am panicking right now.

---

<div class="post-metadata">

**Author:** ![watanak](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/watanak/32/86368_2.png) [@watanak](https://community.hubspot.com/u/watanak)\
**Post date:** [March 25, 2020, 1:35pm UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731/8 "2020-03-25T13:35:12Z")

</div>

Empty

---

<div class="post-metadata">

**Author:** ![hellis](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/hellis/32/2608_2.png) [@hellis](https://community.hubspot.com/u/hellis)\
**Post date:** [April 10, 2020, 3:07pm UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731/9 "2020-04-10T15:07:43Z")

</div>

I couldn’t agree more! I don’t necessarily want people on certain teams to have access to these files. Restricting FORM access would be nice as well!

---

<div class="post-metadata">

**Author:** ![amberleemaya](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/amberleemaya/32/38459_2.png) [@amberleemaya](https://community.hubspot.com/u/amberleemaya)\
**Post date:** [April 22, 2020, 7:24pm UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731/10 "2020-04-22T19:24:13Z")

</div>

I agree as well. This is very dangerous. Employees may not realize they are deleting something important.

---

<div class="post-metadata">

**Author:** ![peterq](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/peterq/32/79091_2.png) [@peterq](https://community.hubspot.com/u/peterq)\
**Post date:** [May 1, 2020, 11:13pm UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731/11 "2020-05-01T23:13:17Z")

</div>

This is absolutely critical from a security perspective.

Shocked that literally anyone in our HubSpot account can access all files.

---

<div class="post-metadata">

**Author:** ![jcbmartins](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/jcbmartins/32/43915_2.png) [@jcbmartins](https://community.hubspot.com/u/jcbmartins)\
**Post date:** [May 6, 2020, 3:40am UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731/12 "2020-05-06T03:40:41Z")

</div>

Hey guys,

**EXTREME RISK AND SECURITY ISSUE, especially after the launch of the Hubspot CMS**

I would like to reinforce the request for this resource, as it is extremely important.

A free user can delete all files and images from the Company’s website.

Not to mention that it can also replace the image with another one with inappropriate content.

The laughter was already very high, after they launched the Hubspot CMS that enterprise companies use, made it even more complicated, since the company’s entire website uses FILES to store institutional images.

**Mixing users’ files with files vital to the company is serious.**

---

<div class="post-metadata">

**Author:** ![ctyriver](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/ctyriver/32/229965_2.png) [@ctyriver](https://community.hubspot.com/u/ctyriver)\
**Post date:** [May 6, 2020, 11:26am UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731/13 "2020-05-06T11:26:06Z")

</div>

**Any updates on this yet?** I feel as though I can speak for everyone when I say thank you for listening to our concerns! Or at the very least, everyone on this string and everyone who didn’t realize the file permissions issue exists in the first place — which I guarantee would be a huge number if you polled users.

---

<div class="post-metadata">

**Author:** ![petermcmath](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/petermcmath/32/101739_2.png) [@petermcmath](https://community.hubspot.com/u/petermcmath)\
**Post date:** [May 7, 2020, 3:02pm UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731/14 "2020-05-07T15:02:23Z")

</div>

Would be great to see this update made.

@hubspot product team - is this on the roadmap?

---

<div class="post-metadata">

**Author:** ![watanak](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/watanak/32/86368_2.png) [@watanak](https://community.hubspot.com/u/watanak)\
**Post date:** [May 20, 2020, 6:50pm UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731/15 "2020-05-20T18:50:04Z")

</div>

Hi everyone,

Thank you for submitting your ideas on this community thread. I am updating the status of this idea to “In Planning”.

We will continue to share updates on this topic on this thread.

Sincerely,

Kie

---

<div class="post-metadata">

**Author:** ![amberleemaya](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/amberleemaya/32/38459_2.png) [@amberleemaya](https://community.hubspot.com/u/amberleemaya)\
**Post date:** [May 20, 2020, 8:52pm UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731/16 "2020-05-20T20:52:04Z")

</div>

Awesome @watanak !!! Thanks for the update!

---

<div class="post-metadata">

**Author:** ![darshakparmar](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/darshakparmar/32/102437_2.png) [@darshakparmar](https://community.hubspot.com/u/darshakparmar)\
**Post date:** [May 22, 2020, 10:26am UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731/17 "2020-05-22T10:26:29Z")

</div>

@watanak, I am surprized that HubSpot needed someone to come up with an idea for this. This really is not a feature request. This is about averting a potential risk.

---

<div class="post-metadata">

**Author:** ![mulrich](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/mulrich/32/27116_2.png) [@mulrich](https://community.hubspot.com/u/mulrich)\
**Post date:** [June 25, 2020, 7:56pm UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731/18 "2020-06-25T19:56:23Z")

</div>

This is something that needs to be updated ASAP.

We need limited users to be able to see files based on their role.

---

<div class="post-metadata">

**Author:** ![Stevie-Kv](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/stevie-kv/32/97206_2.png) [@Stevie-Kv](https://community.hubspot.com/u/Stevie-Kv)\
**Post date:** [July 9, 2020, 10:10am UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731/19 "2020-07-09T10:10:05Z")

</div>

+1 here.

It’s already in planning which is great, thought I’d just add my voice anyway 🙂

With the potential for any portal getting the CMS add-on/cms-hub. It becomes important to need to permission out the file manager.

- Keep website critical files away from marketing, sales and other departments
- Have a space for marketing content only
- Have a space for sales, service and other departments to make use of for template building, document storage and more

---

<div class="post-metadata">

**Author:** ![MaximilianL](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/maximilianl/32/102437_2.png) [@MaximilianL](https://community.hubspot.com/u/MaximilianL)\
**Post date:** [July 9, 2020, 4:42pm UTC](https://community.hubspot.com/t/restrict-access-to-file-manager/16731/20 "2020-07-09T16:42:52Z")

</div>

For us it´s totaly the same!  
We need this feature asap so that our trainees and our sales partners which are not employed by us can work in Hubspot too.  
Do you already know when you have got it fixed?  
Thanks in advance and best regards.

[Next page](https://community.hubspot.com/t/restrict-access-to-file-manager/16731.md?page=2)
