*** Client Portal Exposing all others Clients


I just come across to find out that any client could get access to others unrelated clients account from their account without the need of the login informations. Please check this out.



Do the clients have the same email address?

yes it does (now it make sense)

her is my problem in this case, most those clients don’t have email or don’t want to share it, so developed a app that gets called by IN webhook and send sms to their contact phone number, but for this to happen I had to add valid email address to each client. Please advise.

Thank you

@david do you have any suggestions?