Change Workspace Permissions to Base Permissions

[Kim_Trager1]

Im making a airtable system, for a friend of mine.
It deals with quite sensitive data…
Is there a way to make sure an editor can’t just duplicate a whole his base including all records into their own workspace, but still be able to edit records?

[Virginie_Beurto]

I agree, and in a GDPR context, it’s uncompliant :upside_down_face:

[ScottWorld]

Yep, it’s one of the major security holes in Airtable (yes, there are more of them).

You could use a portal tool like MiniExtensions.com to create a more secure user frontend for Airtable, but then you lose all of the interface benefits & most of the features of Airtable.

I would recommend that people keep emailing support@airtable.com about this issue. Although it’s been 6 years and they haven’t cared enough to address this issue, so it’ll likely never happen.