Need to prevent users from downloading specific attachments

Hi community,

We've been using redmine in our company for a while and it's become a very popular tool. So far we're running 6 different instances.
I have a request from one of my redmine admins to be able to block the download of specific pdf files. (Copyrighted Files)
The rest of the attachments posted in his instance could still be downloaded.

So far he's been to the point of blocking "selection and copying" with a pdf password, but still people can download the file when posted in Redmine.

I imagined doing this on a specific webfolder that would meet these requirements on the apache server - and then put the link into redmine - but I didn't really evaluate this method yet, and I'm not an httpd expert.
Besides, this type of solution would be too hard to understand for the administrator - and I don't have time on my side to do it for him every other day or everytime he has a new "protected post" to make.

So I wondered if anyone knew some plugin, or method to do it directly in redmine's config ?
Or maybe with a RO_ (ReadOnly_) tag before the filename or anything similar that would indicate to Redmine => this cannot be downloaded.

Thanks in advance for any clues ;-)

Replies (2)

RE: Need to prevent users from downloading specific attachments - Added by Alessandro Gustavo over 9 years ago

Phil Darras wrote:

Hi community,

We've been using redmine in our company for a while and it's become a very popular tool. So far we're running 6 different instances.
I have a request from one of my redmine admins to be able to block the download of specific pdf files. (Copyrighted Files)
The rest of the attachments posted in his instance could still be downloaded.

So far he's been to the point of blocking "selection and copying" with a pdf password, but still people can download the file when posted in Redmine.

I imagined doing this on a specific webfolder that would meet these requirements on the apache server - and then put the link into redmine - but I didn't really evaluate this method yet, and I'm not an httpd expert.
Besides, this type of solution would be too hard to understand for the administrator - and I don't have time on my side to do it for him every other day or everytime he has a new "protected post" to make.

So I wondered if anyone knew some plugin, or method to do it directly in redmine's config ?
Or maybe with a RO_ (ReadOnly_) tag before the filename or anything similar that would indicate to Redmine => this cannot be downloaded.

Thanks in advance for any clues ;-)

I think you aren't able to do it!

Look for this feature: http://www.redmine.org/issues/12677
It's still open!

RE: Need to prevent users from downloading specific attachments - Added by Phil Darras over 9 years ago

Hi Alessandro and thanks for taking some time on this.
Yeah ! Nice feature that would be !
"To be Continued" I guess ;)
Thanks again.

(1-2/2)

Project

General

Profile

Redmine