💡 Feature Idea: Visitor links that expire
Visitor links that "live forever" pose a security risk.
As a Facilitator, I want my visitor (anonymous) links to automatically expire after a period of time, so that I do not have to worry that they will get into the wrong hands.
As an Admin, I want MURAL to automatically revoke all visitor links 14 days after they are created, so that our murals are not accessible by anyone with a link indefinitely.
Comments
-
I like the idea of automatically expiring visitor links on the one hand. Especially from a perspective of security and keeping things safe. From a collaboration point of view this would mean that one would have to renew the users every now and then or that collaboration is only limited to a specified time period and that might be a bummer for some teams.
How about an option for admins or facilitators to force a password for visitor links?
Would that help you?
1 -
Good point about collaboration. I am assuming that Visitor links are one-time use cases, e.g., workshops with people who won't expect to retain access long-term. If they need long-term access, they need Guest or Member accounts.
But if I was the MURAL product manager, I would want to vet this assumption. As part of this, I would research how often Visitors interact with murals after the link is created. I assume there is a period of non-interaction, then the link is shared, followed by a lot of activity, which quickly tapes off after the workshop. But there may be non-workshop use cases.
One variation to explore would be allowing the Facilitator to set the expiration date for the link.
2 -
I like the password idea, but I do not think it would work. If admins force it, then many users will just pick 1 basic password that they use every time and include in the same message as the link.
2 -
I agree. Forced passwords are always a bad idea and annoying for users... You're right.
Regarding visitors it would really need some more research, I think. I do mostly workshops with Mural and most people come in as visitors (some as members of our company), but in most cases, they do not continue working on the results in the same Mural again. It's more for documentation to come back and see the results and the process.
But I think, we'll see more asynchronous work in the future and that would mean Guest accounts and more use of Visitor accounts. Curious about how this will develop over time...
1 -
For Enterprise use and the importance of security, it is a deal-breaker that we cannot force expiration of visitor links or even force password protection (made a feature request for this as well). Admins should definitely be able to force an expiration time for visitor links.
2 -
I see that this is already implemented. As a company admin, we can enforce visitor link expiration!
1 -
Hello 👋
We released the ability to set expirations on visitor links to Beta, about 1.5 weeks ago! (yay!)
With this feature, Mural owners will be able to set an expiration duration or date on visitor links through the Share modal, on any Murals they own.
Also, Company admins have an ability to enforce expiration on visitor links on all Murals associated with their account, through the Company dashboard.
NOTE: The feature is currently behind a feature-flag and can be enabled by reaching out to Mural Support or to your Success team. This is currently only available to our Enterprise customers. We'd love to get more Beta participation, so if interested, please reach out to your Success team, and we will get you set up! :)
1 -
Impossible to delete comments? Apparently?
0
