Notification when base is shared with someone else

[Erwan_Pannier]

Hello,

Given that every collaborator can share a base with anyone else, is it possible to notify a given email address (or every existing collaborator) when the base is shared with someone new?

Best

[M_k]

Hi @Erwan_Pannier

I found this link. It covers restricting emails.

Airtable - Support

Creating a base share link or a view share link

As an alternative to adding individual people as collaborators, you can create a read-only share link that allows anyone with the link to view (but not edit) an Airtable base or a specific table vi...

Hope this helps.

Mary Kay

[ScottWorld]

Erwan_Pannier:

Given that every collaborator can share a base with anyone else, is it possible to notify a given email address (or every existing collaborator) when the base is shared with someone new?

Sadly, I don’t know of any way to get email notification when a base (or view or table) is shared. Some people might consider this to be a small security risk in Airtable, since you have to keep checking to see if anything has been shared.

And this sort of ties into the much larger security risk here:

MAJOR SECURITY HOLE IN AIRTABLE: Any collaborator (even read-only collaborators) can steal 100% of y... Product Suggestions

Totally agree with you. This is actually a really big security hole in Airtable, and in my personal opinion, it should be addressed ASAP. The proprietary data of a business is often its most important core asset. The fact that Airtable makes 100% of this data instantly 100% copyable in its full 100% entirety to even the lowest level of employees (read-only employees) is one of the biggest security risks, security holes, and :triangular_flag_on_post: :triangular_flag_on_post: …

[Bill_French]

ScottWorld:

I don’t know of any way to get email notification when a base (or view or table) is shared.

Unfortunately, this is fundamentally a huge challenge and a giant security issue as @ScottWorld has pointed out repeatedly in this community. As bad as this is, there is an equally bad way to detect unknown activity on a base.

A client of mine is actually entertaining this crappy idea.

• Create a simple Script Block that is enticing for users to run. It could be tips, instructions, or even a Read Me that is titled “DON’T READ.ME”. :winking_face: It could also have a quick survey including - how did you find out about this base?
• In that script block, capture the session data (with user IDs) and compare it to a secret table that white lists known and trusted users, post any activity that is unexpected to the secret base/log table.
• Set up a monitoring process on the log table looking for users that are tagged as “uninvited”.

Now you have your list of uninvited guests.