Enabled "registered users only" then can't read secrets links as anonymous user.

[BartoszBrodnicki]

Description

If this setting is enabled then people can't read someone secrets links without login. But this flag said "Only registered users can create secrets", so if we enable it then anyway other people should read other people secret links without account.
I hope this option will be improved so that new user registration can be closed, but everyone can read the links sent without logging in.

Screenshots

No response

Additional information

No response

[coderabbitai]

📝 CodeRabbit Plan Mode

Generate an implementation plan and prompts that you can use with your favorite coding agent.

• Create Plan

Examples

• Example 1
• Example 2

---

🔗 Similar Issues

Related Issues

• [FEATURE] Allow enabling/ disabling and setting defaults by env vars or admin settings #393
• [FEATURE] | Add "Delete this secret" button for viewer #411
• Logged in Users see tabs they cannot access #459
• [BUG] SECRET_UPLOAD_RESTRICTION not working #355

👤 Suggested Assignees

• tracure1337
• ltguillaume
• tkopitsc
• no8ody

---

🧪 Issue enrichment is currently in open beta.

You can configure auto-planning by selecting labels in the issue_enrichment configuration.

To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

issue_enrichment:
  auto_enrich:
    enabled: false

💬 Have feedback or questions? Drop into our discord or schedule a call!

[bjarneo]

This is intentional. I need to update the flag, and I will now. It should be "Only registered users can create and read secrets".

I understand what you need, though, so I will keep the issue open.

Also, PRs are always welcome.

[BartoszBrodnicki]

Great! I hope that a new flag will be created so that registration can be closed and the creation of secret links without an account will be prohibited, but it will still be possible to read secret links without logging in.

Thank you for fast reply and communication 😄

[larsvik]

Hey guys,

I also wish the flag means - Only registered users are allowed to create and request secrets.
Not that it means that both the creator/requester and the receiver has to be registered.

Thanks!

[ToshY]

I was looking for the option to let registered users create and anonymous users read, but apparently it is not here (yet)? Will the option be added?