OpenmediumPermissionsProblem #32

Permissions do not apply to nested items

33% of problems resolved · median first response 8h

Restricting a parent container leaves items nested inside it readable by anyone with a direct link.

Environment

API · v2 · server-side

Response timeline

Every state change is public, including the company's reasoning.

API responses omit rate-limit headers

There is no way to see remaining quota before being throttled, so clients can only back off after a 429.

Audit log omits deletions

Created and updated events are recorded but deletions are not, which leaves a gap in the trail during a compliance review.