I was just looking at my own user account while logged in as Guest. Guess what? All the files in InSync are visible from that account (and any other user account on my Mac).
Obviously, this is a privacy disaster for ANYONE who shares a computer with others.
Why is this done this way, and when will this be fixed?
Hello @DRC,
When syncing a new account, the permissions for the default top-level folder location is restrictive. But when choosing a different top-level folder location, we leave the permission as is. We’ll review the use cases of our onboarding workflow in order to improve the privacy of the files.
Thanks for letting us know about this issue.
Dropbox used to have this problem too. If you chose to put your Dropbox folder at the root level of your Home directory, it would be, by default, visible to all other users of the machine. Apparently the OS X default permissions work this way.
But I don’t think any users would ever expect or want, to expose all their documents to all other users on the machine. Dropbox changed this setting to use custom permissions to keep files private to the individual user, and I would think you guys would want to as well.