Sharing and Access
Sharing in SynckHub should be explicit, scoped, and reversible.
Sharing modes
- internal sharing for ongoing team collaboration
- guest sharing for bounded external participation
- public shared-link access for controlled read-only distribution
Critical behavior
- Links are references/capabilities, not ownership changes.
- Effective access is always checked at request time.
- Revocation and expiry are part of normal operations, not emergency-only actions.
Safe pattern
- choose smallest scope (item or folder)
- apply minimum required role
- verify effective access with a test user
- review and revoke stale access periodically
Common failure modes
- over-sharing at root level
- long-lived guest access with no review
- public links without expiry for sensitive workflows
For public-link specifics, use ../common-tasks/create-public-shared-link.md.