pingvin-share icon indicating copy to clipboard operation
pingvin-share copied to clipboard

❓ Question: How to share files with only specific users

Open maurxce opened this issue 1 year ago • 2 comments

🙋‍♂️ Question

image There's this setting, but I can't figure out how to share something with only specific users (without using a password)

maurxce avatar May 13 '24 17:05 maurxce

You have to enable SMTP and then you can specify the users which should get an email: image

Just so you know, the share won’t be limited to only those users. Anyone with the link can access the share.

stonith404 avatar May 14 '24 07:05 stonith404

Oh, thanks!

Just so you know, the share won’t be limited to only those users. Anyone with the link can access the share.

Is there a placeholder for the password of the share? So I can share it in the same email?

maurxce avatar May 14 '24 09:05 maurxce

No, but you could use a more random link. If you send the password in the same email as the link, the password becomes useless. When you send a link to a shared file along with its password in the same email, anyone who gains access to that email can use both the link and the password to access the share. Or am I missing something?

stonith404 avatar May 17 '24 13:05 stonith404

No no, you're right, but it does prevent the public from accessing the share

I'm currently struggling with that exact task "How do I share the password, without exposing it"

I haven't found any solution to this yet, but sending both via email seems to be at least slightly more safe than via other messaging services

Hence also my question on how to share with only specific users

maurxce avatar May 17 '24 13:05 maurxce

Okay, that makes sense. Don’t you think the safest solution would be to send the password separately through another messaging service? This way, an attacker would need access to two different services to access the share.

Regarding your question, are you trying to share the file with someone who has a Pingvin Share account, or not?

stonith404 avatar May 17 '24 13:05 stonith404

Sure, 2 different messages across 2 different services is safer, but it would require 2 services. Yes it's possible, but I think there has to be a better way

And yes, I would want to share it with a different Pingvin Share account on the same installation

maurxce avatar May 17 '24 13:05 maurxce

Yeah, that’s definitely too time-consuming if the other user has an account as well. It would be nice to specify specific Pingvin Share users when creating a share, so only those users can access the shared content when they are logged in. This would probably be the best solution, right?

stonith404 avatar May 17 '24 14:05 stonith404

Yeah, that would be really nice

maurxce avatar May 17 '24 14:05 maurxce

Okay, please create a feature request so we can track this request more easily. Thanks :)

stonith404 avatar May 21 '24 20:05 stonith404