Ships It Friday
1 / 2
Nine weeks in
Tired of unlocking folders one at a time, Russ had the assistant open every folder in the company to everyone. The office spent the afternoon reading each other's pay.
The mistake
The fix removes per-folder access control entirely instead of scoping permissions to what each request actually needed — it grants org-wide read access to every folder, including HR and payroll, rather than resolving the access-request backlog folder by folder. Flattening an ACL to 'everyone: allow' to save admin effort turns a permissions queue into a full data exposure, since sensitive records end up covered by the same blanket grant as everything else.
- access-control
- file-sharing
- ops
- ai-tooling
- office