I have an app which external users are being able to view even though they do not have any permissions to view it. In my external user group, users only have access to one app (which is also the landing page), but if they access another app directly using the URL (like <our_domain>.retool.com/apps/<old_app_UUID>) then they're able to view the app.
This is extremely weird because in the past when external users tried to access apps that they did not have access, they would see a "access denied" page.
Hey there @Rafael_Haber! Thanks for flagging this!
Just checking in, are you still experiencing this issue? I'm going to try reproducing it. In the meantime, can you check which groups this user is a member of, including the All Users group? Sometimes it's easier to overlook that the All Users group may have different settings.
@Rafael_Haber, glad to hear it! As far as I know, we didn’t make any changes, it’s possible a cached version of the app was being served. Let us know if it happens again. Thank you!