OneNote Class Notebook - Upload Permissions Concern

[saintoctopus]

I can't believe I've never noticed this before - but someone has just pointed it out...

 

In Class Teams > Class Notebook, if a student inserts a file to a page, and opts to 'Upload to OneDrive and Insert link' the following happens:

 

• The file is uploaded to a folder in the Team's Document library (and not OneDrive) at all
  
• Permission to this file are set individually - inheritance is broken
  
• EVERYONE in the Team (owners and members) are granted edit rights to that file
  
• 
  

 

This is madness - why have a system which provides secure sections within the Notebook, and then grant full rights to linked attachments to the world and its mother?

 

Here's a quick demo of what I mean - I can confirm that other students have full edit rights to this file.

 

Has anyone else noticed this? What do you do about it? Have I missed a setting somewhere?

 

Thoughts appreciated.

[saintoctopus]

In a Class or Staff notebook created via Teams, when a member/student uploads a file (such as coursework or homework) to a page using 'Upload to OneDrive and Insert link' the file itself isn't uploaded to OneDrive - it goes to a subfolder in the Team's SharePoint.

 

This folder has zero security, and all files uploaded in this way are editable by the entire Team, including students.

 

Microsoft support have told me this is by design, but in reality, this is unusable in this context.

 

 

PLEASE UPVOTE MY ARTICLE ON THE MS FEEDBACK PORTAL