Expensify.org is accepting proposals for new campaigns. Submit yours here by April 30th to receive up to $100,000 in funding for campaigns dismantling injustice related to: Climate, Homes, Hunger, Reentry, or Youth.
Limit expense report visibility when a submitter CC's someone else on an expense report
It appears that when someone submitting an expense report CC's someone else, the person getting copied not only sees that expense report, but can then basically see all expense reports submitted (past and future) for that person that copied them!!
This seems like a gaping privacy hole to me, as the submitter might have only wanted them to see that single report and not every report they ever send.
I think in this scenario, the person who is copied should be limited to only seeing the expense report(s) they are copied on - not everything belong to the person that copied them.