Share links and who can see a document

Every document is private by default. Nobody can see it until you create a share link. Ask your assistant for a share link (get_share_link) and you get a URL with a secret token in it. Anyone with that link can view the document — treat it like a key. Share links can be set to expire, and they can be revoked and reissued at any time. A share link can also require a password. It protects against accidents, such as a reply-all or a link sent to the wrong person; it does not stop someone forwarding the link and the password together. Ask for a password when you get the link, and send it separately from the link (in a different message or channel). Passwords are stored hashed and can't be shown again, even to you. If one is lost, create a new link with a new password. To open your own documents you don't need a share link: sign in and open them from your site. A sharing review (review_sharing) lists every live link in your workspace, so you can see what is reachable from outside.