I was planning on using Monday to provide a secure Dashboard view of production and performance information to our huge independent contractor (and agency) base through Guest roles, thus protecting internal information from their view; but, was extremely disappointed to learn that role permissions allow the Guest to access confidential company information.
Guests can access the names and contact information of all other Guest contractors and agencies we utilize, and with ease poach from our most valuable asset. We’re the largest of our kind in the industry, but I can imagine this would be equally detrimental to smaller companies.
This is what access looks like, allowing Guests to click into others’ “cards” and see their profile information:
Has anyone found a work-around to this defect in information security?
Guests can also do a lot of other stuff I’d rather them not do (I’d like them to be viewers of dashboards info ONLY), but this is the biggest problem!
Thanks for any information, commiseration or ideas!