Unverified50% confidenceOpinionExact time
The lack of access control means anyone who obtains the link can view and edit Tiny Little Office documents, so it is not suitable for sensitive content or content requiring tiered permissions.
1
Sources
50%
Confidence
Long-term
Relevance
10/20/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedBefore retrieval, documents the user has no permission to view should be filtered out based on the user's access control list; writing "do not mention confidential documents" in the prompt does not constitute access control.69% similarUnverifiedCowork enforces extremely strict file access controls; if a file is not in an authorized folder, it can be seen even when dragged into the conversation but cannot be read.67% similarUnverified一个负责回复邮件的Agent不应拥有删除数据库的权限，通过限制工具访问范围可将出错破坏压缩到最小67% similarUnverifiedExternal agents can only work on public pages, are rate-limited to about one request per second, cannot log in, cannot submit other forms, cannot do load testing, and cannot touch private content.66% similarUnverifiedBy default, LLMs cannot read a user's PDFs, databases, Slack discussions, API interfaces, or internal knowledge unless actively provided.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1075655API
curl https://kongchang.com/api/v1/knowledge/claims/1075655MCP
get_claim(id=1075655)