Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Prohibit File Download
#1
Information 
Looking to block download of files
This may be site wide or specific user/group
Doesn't matter for now.

--- edit ---
out/out.ViewDocument.php is the way to go here but only partially

The popup window gives additional tools to allow the file to be downloaded.

Hmmm back to the text editor


Reply
#2
(04-27-2012, 01:36 PM)yerg Wrote: Looking to block download of files
This may be site wide or specific user/group
Doesn't matter for now.

I'm thinking out/out.ViewDocument.php is the way to go here but may be wrong.

out/out.ViewDocument.php isn't enough. It just outputs the links to the download page op/op.Download.php. Somebody with some knownledge on how letodms works could easily access the document anyway. If you want to reliably prevent somebody from downloading a document you will have to do it in op/op.Download.php.

The idea isn't bad and it raises the question whether the current access restrictions could be extended by a 'download allowed' option. IMHO, this would be the most reasonable way to go, but I doubt it is easy to accomplish. Access rights have a given order of 'no access', 'read access' and 'write access'. 'download' should probably be between 'read' and 'write'. Internally the access rights are stored as 1,2, and 3. So, adding a new right requires reordering and lots of changes to the database content.

Uwe
Reply
#3
(04-27-2012, 02:08 PM)steinm Wrote: out/out.ViewDocument.php isn't enough. It just outputs the links to the download page op/op.Download.php. Somebody with some knownledge on how letodms works could easily access the document anyway. If you want to reliably prevent somebody from downloading a document you will have to do it in op/op.Download.php.

Was just digging round in the files and looking for the download files so thanks for that.

Reply


Forum Jump:


Users browsing this thread: