Grandes mentes pensam igual

As it stands the HubSpot API will accept the HAPI Key for all requests.   As a corollary this means that anyone who has the HAPI Key can do anything with the account. Such as:   Export all contact information Send any email campaign Manage users Export and manage deals Etc. There is no way to limit the power of the HAPI Key in HubSpot which is really a weak point. If the key is ever compromised, the portal is at extreme risk which can do irreparable damage to a company/brand.   What is needed is a more comprehensive security setup for HAPI keys. Yes, we can phase them out and move to OAuth, but seriously, the HAPI Key is used in so many integrations by now that it would be literally impossible to "phase out" at this point.   So, for the long run I am proposing:   Create a way to maintain multiple keys and suspend/revoke their access Make it possible to limit them by IP Add an optional hashing mechanism for [sensitive] calls Add a way to fine tune any key's access to different APIs. As an example, look at SparkPost's API key management:     I would also like to add that the key itself looks like a UUID v4 — not guaranteed to be cryptographically secure.   I think you would be better off using other recommended hashing methods to generate guaranteed unique and unguessable keys at least 128bits long. Just my own two cents. ... Exibir mais

Grammarly (the spell checker) does not work within Hubspot properties. It proposes edits as usual but clicking on them to accept them does not apply them (it does but then they go away). I think this has to do with Hubspot's frontend and it would be great to have a frontend that supports Grammarly and any other app using the same specs. ... Exibir mais

Currently the setting for users to edit contacts is an all or nothing deal. If you want your users to be able to edit a contact's phone number they also get permission to delete it.    Would be awesome if you could remove a user's ability to delete a contact but still allow them to edit basic info like phone number, address, etc.  ... Exibir mais

Hi,   As a agency employee I wanted to set up a deal based workflow for one of our customers. Unfortunally I need to occupy a Sales Professional seat to be able to do that.   I would like to be able to set up these kind of tasks/features as an agency without the need for the appropriate license. Otherwise it's hard to deliver our services and it feels rather odd to demand a Sales Starter or Pro seat of our customers just to be able to do this...   This goes for any feature that is available in the clients portal for Sales and Service Hub: Deal based workflows Quote based workflows Ticket based workflows Snippets Sequences Etceterac   Anything should be managable for agency employees so they can provide their services in HubSpot. ... Exibir mais

We have created Company Properties that should also be made available in the Contact Properties. (I am not talking about creating a workflow that copies content from property A to property B) It is about making the full set of custom property fields available in another section. In our case it´s Licensed products and modules which should be available at both, company AND contact level for marketing automation, e.g. employee from company A visits a certain page on our web page. The system should know that this employee´s company has product XYZ in order to e.g. show a specific CTA/form etc. Another one would be creating lists based on contact properties, e.g. send special upgrade quote to all that use Module A and C to upgrade to the ABC-Bundle etc.   It is very valuable to have such information not only at company level because it is certain employees showing activity thus these individuals should e.g. go onto a certain list etc.   A good option would be to allow for creation of "Shared Properties" which are available to all sections, i.e. Customer/Contact/Deals/Tickets. With that they could simply be selected where needed. ... Exibir mais

Hey Hubspot,      There seems to be some real interest in this feature in the community.  You have suggested I post this in the "Ideas" discussion, so here it is.   It is very commonplace for executives to have different personas across different organizations.  For example, I have 3 separate Hubspot accounts, for 3 separate companies.  In each company, I have a different email address.  Why can't I simply switch between them?   You currently allow people to switch between Hubspot accounts, provided that they have the same email address in both accounts - this does not make much sense.   It seems you are so close to solving this problem - you're just missing the critical last step.   What is the likelihood of this happening soon?   Thanks Norm ... Exibir mais

Hi guys,   Can you consider making E-Sign part of the Professional package €400/mo + €75/user should be plenty sufficient to make it so your users can utilize E-Signatures, it's a very basic function and it feels a cheap tactic that it's gated behind a €700/month upgrade that we (and I'm sure most companies) do not need for any other feature.   Please consider making this a separate module or packaging this into Professional.  ... Exibir mais

The owners API doesn't return values for any team assignments on the users. If this could be added that would be very helpful. Either that or allow users to export a list of people from the users & teams dashboard. ... Exibir mais

Currently facing the issue of not being able to disable 2FA authenthication for users in my portal. Wishing this was a feature as sometimes unforeseen circumstances arise and we might not be able to authenthicate via mobile device. Would be great if Super Admins were granted this right.    - Jamie vanWalsum ... Exibir mais