What is the problem?

Guru Card link sharing in Slack defaults to share a card preview even when a link is shared with someone who doesn’t have permission or read access to that card. This can be when a card is shared directly or in a channel. The preview can only be removed if the sender deletes the preview in Slack.

Who is it a problem for?

Users who create sensitive or confidential content and share links in Slack directly or in channels where there are users who don’t have read access to that card. 

How do you solve the problem today?

We have a disclaimer in a callout box at the top of each card so when a Guru Card link is shared none of the card content is shown in the first couple of lines. The disclaimer is the only thing that’s visible now, the callout box just has a few lines on who the card is intended for. 

How would you ideally solve the problem?

Allow Slack admins to disable the previews shared through the Guru Slack app or in the Guru Admin have an option to disable the preview for content that isn’t shared with all users in that workspace.

How big is the problem (business impact, frequency of impact etc.)?

From a security perspective this poses a problem from us but we have a work around in place shared above. There’s going to be an element of education that has to happen around link sharing however disabling it all together would be ideal incase something is shared or published without a disclaimer or by accident with someone who doesn’t have access to that card.