topic Re: How to restrict public access to document shared by external link ? in Alfresco Forum

How to restrict public access to document shared by external link ?

benjamindupont — Tue, 11 Apr 2017 09:59:38 GMT

Hi there,Currently, when I want to directly access to a document with a shared link, I don't need to be logged for accessing to the preview and download it. It's big security hole for me, because I don't want anybody can access to document if he have the link.Do you know how can I restrict the acces

Re: How to restrict public access to document shared by external link ?

afaust — Tue, 11 Apr 2017 10:15:06 GMT

Simply do not use the shared links in this case. These will always be public - that is the whole point. Use permissions on the document itself to manage access for logged in users.

Re: How to restrict public access to document shared by external link ?

benjamindupont — Tue, 11 Apr 2017 12:36:49 GMT

Thanks for your quick reply. Too bad that we can't manage this...

So, I've 2 questions :

- Like it's mentionned in this thread : is there a way to know which files are shared ?

- In the user's rights, can we manage the right to have or not the shared button ?

Re: How to restrict public access to document shared by external link ?

afaust — Tue, 11 Apr 2017 13:05:36 GMT

As an administrator / power user you can certainly perform a query for shared documents. They should all have a very specific aspect applied (don't know the name right now).

There are no default permissions regarding public sharing links that can be assigned to / revoked from users to limit this functionality. If a user can see the document they can share it. Typically, in most of the Alfresco projects I have worked in we completely remove these social features from the document library.

Re: How to restrict public access to document shared by external link ?

benjamindupont — Tue, 11 Apr 2017 13:44:32 GMT

OK, thanks for your replies !

Re: How to restrict public access to document shared by external link ?

cesarista — Tue, 11 Apr 2017 18:41:00 GMT

Hi Benjamin:

To know which files are shared you can type in Alfresco search --> ASPECT:'qshare:shared'

You can use this search for example with the help of a smart folder:

How to manage public content in Alfresco with the help of virtual folders - Virtual Folders for dealing with public docu…

Regards.

--C.

Re: How to restrict public access to document shared by external link ?

benjamindupont — Wed, 12 Apr 2017 10:23:53 GMT

Hi Cesar,

Thanks for your reply. I try to search with the alfresco share search bar but it doesn't return anything... And I try with the smart folder but there is the same result... Do you have an idea why I don't have any result ?

Re: How to restrict public access to document shared by external link ?

cesarista — Thu, 13 Apr 2017 19:01:44 GMT

It should give results, if you have content with public urls (shared). The smart folder does similar search queries. If you can not find anything maybe you have problems with your indices...

Regards.

--C.

Re: How to restrict public access to document shared by external link ?

benjamindupont — Fri, 14 Apr 2017 14:43:56 GMT

Hi Cesar,

You're true, I had troubles with SOLR which did'nt work anymore... Anyway I fixed the problem after performing a full reindex, and the search / smart folder works again ! Thanks !

Now, I would like to unshared all of my documents (and I have like hundreds...). Do you have an idea how can I (simply) do that ?

Re: How to restrict public access to document shared by external link ?

cesarista — Fri, 14 Apr 2017 15:39:43 GMT

Hi Benjamin:

If you have the Javascript Console installed in your Alfresco server you may run something like:

var nodes = search.luceneSearch('ASPECT:"qshare:shared"');
var count = 0;
for each(var node in nodes) {
   count = count + 1;
logger.warn(count + ": "+node.displayPath+"/"+node.name);
   logger.warn("This public url is expired --> "+node.properties["cm:to"]);
   node.removeAspect("qshare:shared");
   node.save();
}
logger.warn("Done.");

This will work if you have < 10k nodes. If you have more than 10k, you may run it the number of times that you need.

If you don't have JS Console, you can run it with the help of a dummy rule, or via Alfresco Explorer if you are in Alfresco 4.

Regards.

--C.

Re: How to restrict public access to document shared by external link ?

benjamindupont — Mon, 24 Apr 2017 09:03:25 GMT

Thanks a lot Cesar for this tip, it works well with a rule on the folder !

To conclude, could you just advise me on how to reduce the scope on an precise Alfresco site, in the search with a smart folder (json) and in the rule to delete the shared link (js) ?

Best regards,

Benjamin

Re: How to restrict public access to document shared by external link ?

cesarista — Mon, 24 Apr 2017 10:21:29 GMT

Hi Benjamin:

In the smart folder query you can do something like this:

zk-smart-folder-templates/qsharedFolder.json at master · CesarCapillas/zk-smart-folder-templates · GitHub

This makes it to apply under the actual path when the smart folder is applied (for example in a site).

In the script you may include something like:

search.luceneSearch('+PATH:"/app:company_home/st:sites/cm:<short-site-name>/cm:documentlibrary" +ASPECT:"qshare:shared"')

Regards.

--C.