Here’s the setup:
-We have set up a few teams to share projects with external clients.
-There is one team for each client.
-Our internal staff is a member of the team therefore able to see all of the projects for that client.
-Our external clients are set up as Guests who are only invited to the projects within their team that they are working on.
When an external client (ie, guest user) @mentions in the comment section of a task, they get a list of all possible users they can direct the mention to. This seems like a serious oversight as they are able to see guest users from other teams (ie. our other clients) where they have no access. In our case, guest clients are able to see their competitors and in most cases their email addresses.
I can not find any way to prevent this from happening so I’m hoping someone can point me in the right direction.
I want our guest users to be able to comment on tasks in projects they are given access to and I want them to have the ability to direct @mentions to our internal team and their own team members but do not want to see who all of the guest users are.