Feature #12368
closed
attachements should be viewable NOT downloadable for restricted users.
Added by ahsan akhter over 11 years ago.
Updated over 11 years ago.
Description
I am new in redmines and I have requirements for my project.
"Attachements should be viewable NOT downloadable for restricted users".It as a security hole for my project.
Please anyone help me to resolve this issue.
Do you mean to see the name of the attachment only? Or to have their contents viewable in browser?
- Status changed from New to Closed
- Resolution set to Invalid
- Status changed from Closed to Reopened
Yes,attached documnet's contents viewable in browser.
Just like google docs.
Thanks Massip!!!
- Status changed from Reopened to Closed
What's the distinction from a security POV between being able to see contents but not to download the file?
- Status changed from Closed to Reopened
if downloads allows then restricted user can copy the original physical file from one location to another and it can be uses illegally.
I want just they can view the content on the browser only.
Thanks Massip to ur response.
ahsan akhter wrote:
if downloads allows then restricted user can copy the original physical file from one location to another and it can be uses illegally.
I want just they can view the content on the browser only.
If they can see the contents then they'll be able to copy/paste it in a new file on their HD which will eventually be a copy of the original file, I still don't get it?
I think this requirement should not be done by redmine platform.
A popular method is, using a flash object to show the file content (image, text, etc).
Thanks Massip and fangzheng for your kind response.......!
- Status changed from Reopened to Closed
Also available in: Atom
PDF
Updated by 
Updated by 
Updated by