Share links and who can see a document

Every document is private by default. Nobody can see it until you create a share link. Ask your assistant for a share link (get_share_link) and you get a URL with a secret token in it. Anyone with that link can view the document — treat it like a key. Share links can be set to expire, and they can be revoked and reissued at any time. A share link can also ask for a password. It does not stop somebody forwarding the link and the password together — nothing can — but that is not what it is for. It protects against the accident: the reply-all, the wrong Sarah, the screenshot in a deck. Someone who forwards the link without the password has not leaked the document. Ask for one when you get the link, tell your assistant to send it by a different route than the link itself (a different message, a different channel), and that separation is the whole protection. Passwords are stored hashed and never shown again, even to you — if one is lost, mint a fresh link with a fresh password. If you want to look at your own document, you don't need a share link at all: sign in and open it from your site. Signing in shows you everything you have access to. There is also a sharing review (review_sharing) that lists every live link in your workspace, so you can see at a glance what is currently reachable from outside.