Sharing in OneDrive Not Under Your Control
Posted: August 2, 2022 Filed under: OneDrive | Tags: OneDrive, Permission, Sharing 6 Comments
You would think that when you select Share with specific people in OneDrive you are only giving access to the person whose email address you have entered.
NOPE.
If you grant that user Edit permissions to the document, that user can then share that document with others without you even knowing.
If, on the other hand, you grant a user View access to the document and the user tries to share it with another person, you are notified by email to Accept or Decline the request.
Just thought you should be aware.
Hey Tamara! 
Hi Tamara,
I was of course worried when I saw this blog post.
I just tested in my own 365 today (my work account)
When I share a document fra my OneDrive (view permissions) with a co-worker (specific person) she is not able to share the document after she opened it.
I shared same document (edit permissions) she was able to share it after she opened the document, but I got an email stating she did that including the email address she shared the document with + the option to stop the sharing.
That behavior is what I was hoping for 🙂 but did I misunderstand your post? Or did Microsoft perhaps read your post and corrected the issue?
Thanks 🙂
Best regards,
Malene
Hi Marlene, This can be configured in the Central Administration Portal.
Does this post refer to an environment where “Allow guests to share items they don’t own” is not enabled in the tenant-level SharePoint Sharing settings? Wouldn’t that setting prevent this from happening?
You are aboslutly right. Thanks so much.
Hey Tamara! 😉 My co-worker may also chime in here (she brought this post to our attention) and we both wanted you to know that this is configurable via external sharing policy in the SPAC. I rarely leave the “Allow guests to share items they don’t own” option selected.
If your scenario above is that the file is shared with someone in the same org and that other person has Edit permissions, and that they in turn are able to share the file out to others… then this behavior isn’t surprising given that Edit permissions has both the Manage Lists and Edit Items permissions. SharePoint really needs to add the ability to toggle permission management at the list level…
Thanks so much for the addition. Much appreciated.