topic Re: Disable Download Action in Alfresco Share 3.3g in Alfresco Archive

Disable Download Action in Alfresco Share 3.3g

cfpatel — Mon, 28 Jun 2010 10:40:10 GMT

Dear Friends , I am new to Alfresco using Community Edition 3.3 g .Can any one help me out to disable the download action option while previewing the file from alfresco share. Also give some useful tips to use WebDav with alfresco .Its Urgent,Thank You In Advance,

Re: Disable Download Action in Alfresco Share 3.3g

brauliotrujillo — Fri, 16 Jul 2010 16:08:45 GMT

i don´t know if you still need to disable the download action or if you already found a solution, i had the same issue and after looking everywhere and not finding nothing i decided to give it a try myself and this is what i came up with,

i realized that when you login as admin there is some admin specific actions that no other user can see so i thought there must be a way to do the same for the download action, so whar i did was to look in the xml file containing that behavior, which is "document-actions.get.config.xml" and change the permissions, for example, if i wanted that a user could download the file, i changed his role to collaborator which has "edit" permissions, so i set the download to "permissions=edit" and if i didn´t want the user to be able to download i change the role of the user to contributor or consumer and then they couldn´t see the download action button.

Don´t forget to backup before you do any changes

Here´s a piece of code from the original xml file regarding the download behavior:


<action type="simple-link" id="onActionDownload" href="{downloadUrl}" label="actions.document.download" />
<action type="simple-link" id="onActionView" href="{viewUrl}" label="actions.document.view" />
<action type="simple-link" id="onActionDetails" permission="edit" href="{editMetadataUrl}" label="actions.document.edit-metadata" />
‍‍‍‍‍

Note that "onActionDownload" which is the download action, and "onActionView" which is the view in browser action, don´t have a permission so everybody can see it, on the other hand, "onActionDetails", which is the "Edit Metadata" action have permission=edit", only user with editing privileges ( Admin, SiteManagers and Collaborators ) can see that action button.

So if you only want user with "Edit" privileges to be able to download files, set the permission as is:


<action type="simple-link" id="onActionDownload" permission="edit" href="{downloadUrl}" label="actions.document.download" />
<action type="simple-link" id="onActionView" permission="edit" href="{viewUrl}" label="actions.document.view" />
<action type="simple-link" id="onActionDetails" permission="edit" href="{editMetadataUrl}" label="actions.document.edit-metadata" />
‍‍‍‍‍

This way not only they won´t be able to download it but also they will not be able to see it in the browser and easily make a copy from there. There´s several lines in the same xml file regarding download and view, so change them all. You will have to do the same for the folder-actions.get.config.xml.

For added security, if you only want the admin or sitemanager to be able to download, set the permissions to permission="delete", so only users with Delete privileges can download.

Unfortunately, Alfresco Share being such a wonderful collaboration app, it has two other ways of downloading the file, in the Version History there is also a download button, and in the Sharing section you can see the download url for the file, so what i did is to add an <#if user.isAdmin> tag to the document-versions.get.html.ftl.

Here´s the original piece of code regarding the download button, its almost at the end of the file:


<div class="actions">
       <span><a href="${url.context}/proxy/alfresco${version.downloadURL}" class="download">${msg("link.download")}</a></span>
               <#if version_index != 0>
                  <span><a id="${args.htmlid}-revert-a-${version_index}" class="revert" href="#">${msg("link.revert")}</a></span>
               </#if>
</div>
‍‍‍‍‍‍‍‍

And this is the code that will only allow the Admin to see that button:


<div class="actions">
       <#if user.isAdmin>
               <span><a href="${url.context}/proxy/alfresco${version.downloadURL}" class="download">${msg("link.download")}</a></span>
        </#if>
               <#if version_index != 0>
                  <span><a id="${args.htmlid}-revert-a-${version_index}" class="revert" href="#">${msg("link.revert")}</a></span>
               </#if>
</div>‍‍‍‍‍‍‍‍‍

Now for the document-links you can do the same to hide the "download file url" and "document url"

<!– download link –>
<#if user.isAdmin>
   <div id="${args.htmlid}-download" class="hidden">
      <div class="url-title"><label for="${args.htmlid}-download-url">${msg("document-links.download")}</label></div>
      <input id="${args.htmlid}-download-url" class="link-value" />
      <input id="${args.htmlid}-download-button" type="button" class="copy-button" value="${msg("document-links.copy")}" />
   </div>
   
   <!– document/view link –>
   <div id="${args.htmlid}-view" class="hidden">
      <div class="url-title"><label for="${args.htmlid}-view-url">${msg("document-links.view")}</label></div>
      <input id="${args.htmlid}-view-url" class="link-value" />
      <input id="${args.htmlid}-view-button" type="button" class="copy-button" value="${msg("document-links.copy")}" />
   </div>

<#if repositoryUrl??>
   <!– webdav link –>
   <div id="${args.htmlid}-webdav" class="hidden">
      <div class="url-title"><label for="${args.htmlid}-webdav-url">${msg("document-links.webdav")}</label></div>
      <input id="${args.htmlid}-webdav-url" class="link-value" />
      <input id="${args.htmlid}-webdav-button" type="button" class="copy-button" value="${msg("document-links.copy")}" />
   </div>
</#if>

   <#– cifs link (N/A)
   <div id="${args.htmlid}-cifs" class="hidden">
      <div class="url-title"><label for="${args.htmlid}-cifs-url">${msg("document-links.cifs")}</label></div>
      <input id="${args.htmlid}-cifs-url" class="link-value" />
      <input id="${args.htmlid}-cifs-button" type="button" class="copy-button" value="${msg("document-links.copy")}" />
   </div> –>
</#if>
   <!– page link –>
   <div id="${args.htmlid}-page">‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Hopefully i explained myself and maybe i helped with this issue.

Re: Disable Download Action in Alfresco Share 3.3g

utpal_desai — Mon, 13 Sep 2010 14:18:55 GMT

Thanks it helped me lot….!

Re: Disable Download Action in Alfresco Share 3.3g

utpal_desai — Tue, 14 Sep 2010 15:45:28 GMT

I am able to disable all the options to save pdf on to desktop, I am not able to search in swf viewer.

Re: Disable Download Action in Alfresco Share 3.3g

ottovoss — Fri, 15 Oct 2010 22:29:31 GMT

This worked wonderfully in Alfresco Community Edition 3.4a. I'm new in Alfresco, so I'm not sure if this is the same in previous versions, but in 3.4, you are able to download the file also from the document list in each folder. When you hover over the file, links to download the file, copy it to another folder, or open in browser also appear.

Do you know where we could deactivate this links too?

Have you found another solution? This seems to me very complicated for something that should be very simple in a platform like this.

Thanks in advance.

Re: Disable Download Action in Alfresco Share 3.3g

ottovoss — Mon, 18 Oct 2010 03:49:39 GMT

Our friend Utpal DesaiSep posted the answer to my question in another forum: http://www.devcomments.com/Disable-Download-Action-in-Alfresco-Share-3-3g-0-to254180.htm

This are all the files that should be modified in order to block download of Files in Document Library.

document-links.get.html.ftl
document-versions.get.html.ftl
document-actions.get.config.xml
dod5015-document-actions.get.config.xml
repo-document-actions.get.config.xml
documentlist.get.config.xml
dod5015-documentlist.get.config.xml
repo-documentlist.get.config.xml

Re: Disable Download Action in Alfresco Share 3.3g

graychan — Thu, 20 Jan 2011 08:42:49 GMT

An additional issue, if user records the link of action, he can download document directly.
It's a risk.

Re: Disable Download Action in Alfresco Share 3.3g

amgohan — Thu, 10 Nov 2011 00:12:39 GMT

Hi,

I want to thank u for this solution, it was very helpful for me.

can u help me with this case :
I want to disable download by default for all consumers but i want also assign download permission to some consumers if my client want.

thnks a lot.

Re: Disable Download Action in Alfresco Share 3.3g

ilyak — Mon, 14 Nov 2011 07:33:04 GMT

I want to disable download by default for all consumers but i want also assign download permission to some consumers if my client want.

So, you need to put into your document-actions.get.config.xml follow code:

<action type="simple-link" id="onActionDownload" permission="download" href="{downloadUrl}" label="actions.document.download" />‍

then set permissions to user by web-scripts like this:

node.setPermission('DownloadContent', user)‍

Re: Disable Download Action in Alfresco Share 3.3g

jherbit — Thu, 12 Jan 2012 17:30:17 GMT

Hi,

otovoos sent a list of the files that have to be modified to block the download function, but, have anybody done this in the Community Versión 4.0?, if yes, could you share the new list of files?

We want to work with Alfresco Software but there is a requirement to block the download of confidential files.

Thanks in advance.

Re: Disable Download Action in Alfresco Share 3.3g

shirleymax — Mon, 16 Apr 2012 11:00:43 GMT

Hi All,
Greetings !
Can anyone please help me with the following requirement.I would want to disable download access for certain consumers and keep it enabled for others.How can that be possible.Similar way can be followed for other roles as well.Also is there any way to give download document access "user" wise?

Thanking in anticipation !

Re: Disable Download Action in Alfresco Share 3.3g

unknown-user — Tue, 23 Oct 2012 02:36:34 GMT

Hi,

Even I am in need of the same functionality. Some consumers can download but not all. How to achieve that it Share?

Thanks