Has anyone had new issues and changes around Access Permissions?

Hey ​@laurel.ch - FIRST: I saw your post in another thread before seeing this one. I moved my response from there over to here, since you own this one independently, and is newer.

I want to acknowledge your concern; I would be concerned as well, and I want to have this checked internally, because this does seem like there’s a piece of info missing here. Not quite sure where exactly, but I think important.

I’m not going pretend it couldn’t have been user error, but I honestly think it was Figma. I was so specific in clicking “Deny” because it was the second time this week, and I was so weirded out by the request from someone I’ve never heard of.

The whole thing went down very weird and felt sus. 

Did Figma change things and allow people to ask to be Editors? In the past it has only ever ask me to approve someone as a Viewer. Then I would have to go and change their seat to Dev or Collab or whatever. 

We have an option for viewers to be able to request edit access for a file -- see page here. Perhaps this is where the requests are coming from? 

The one part I want looked into is the full seat approval that you don’t recall doing.

Can you do a quick ticket file on this page? I can get you escalated to someone on our support team that can help in these situations. I believe they will be able to give you a better summary of what happened for that seat. While it could have been user error, I think it would help address your concerns (and give you better visibility for the future). Let me know when you’ve done this.

Thank you ​@ksn I just did a support chat and submitted a ticket, so I’m sure someone will be reaching out via email soon. 

Please answer these questions directly:

1. Is access (whether temporary or permanent) is being given to users who request upgrades, even if they are denied?
2. Has this ever been an intentional feature? 
3. If so, what exactly did that feature entail; was it 3-day access to features of an upgraded seat?
4. Did it ever allow non-approved users to edit files? 
5. Would a user ever appear as “approved” within admin for a seat they were denied because of this “temporary access” feature?
6. Where can Admins turn off this feature completely? It is a privacy and file-integrity issue. For example, at my company I am literally the only designer and the only Full Seat, and no one else is allowed to touch the files from an Editing standpoint. That is what the Dev, View, and Collab seats are for. From my research the Org plan does not get 2 free seats, so I should only be seeing one (assigned to myself). 

I want these answers in the forum for transparency and helpfulness because a lot of people had questions and concerns around this, and it may shine a light on a bug that Figma missed when creating this feature.

Even if that was a planned feature by Figma, a denied Full Seat shouldn’t still be appearing on my account (and particularly shouldn’t be billed) after that [3-day] period. For resolving that part, I will continue with customer service, and I will report my resolution here for anyone dealing with the same thing. Thank you. 

Ok so I read the article you sent ​@ksn and noticed something. Supposedly if a user doesn’t already have the seat needed to Edit a file, they have to make a Seat Request. This seems to be where the gap is. I never received any Seat Requests. Not from either of those 2 people. I only got a “Request to Edit” on the file itself. So even if I somehow made a mistake and clicked “Approve,” which I am 99% sure I didn’t, shouldn’t they have had to request a Seat Type, separate from requesting to edit this file, and shouldn’t I as the admin have to go through that whole flow of seeing what the extra cost will be and approving it? That is how Figma’s article describes it, and indeed how it should work. Something changed.

Hi @laurel.ch, thanks so much for the additional context!

@ksn is currently out of the office, but I saw that you’ve already connected with our Support team through ticket #1594297. Yumiko shared a reply earlier today with more details and next steps.

Please check your email when you get a chance to continue the conversation there. Thanks again for following up here!