Hi All,
One of my colleagues singed in to PostMan online and were redirected to the Public workspace
Now he though the he is connected to his private workspace, so he tested some APIs and he provided our API username and password… so we are not sure if those credentials were exposed in a way or another? no the user tried to save the request, but we are not sure if the API request were saved to the public workspace or not? how we can check this.?
here are screen shots of the actions he took
Welcome to the Postman Community 
No one will be able to see any requests that you have made in that Public Workspace.
The members who are part of the team that own the workspace, would be able to see some of the requests made by their team but that’s it.
If you were not part of the team, you wouldn’t see any of the history apart from your own.
As you also have no permissions on that Workspace, you wouldn’t be able to save anything in there.
@Danny Dainton Hi,
Thanks for the quick and clear reply. thanks
