topic Download content api in Alfresco Forum

Download content api

bip1989 — Mon, 28 Oct 2019 16:53:09 GMT

hi team

i have came across a requirement in my current project, where i have to disable all dowload buttons in share so that a set of users (organized via groups) can not see download link and can not download the content.
I was able to hide download link and download action for the group using action evaluators.

I took help from this post and made some additional changes to handle group: https://hub.alfresco.com/t5/alfresco-content-services-forum/how-to-disabling-preview-download-in-alfresco-5-2/m-p/10342

Everything works fine. But during unit test i found i was able to download the content using REST "/api/node/content/{storeType}/{storeId}/{id}" api.

Is there a way i can restrict the download on this API or i can disable this api and create custom download API to handle the group checks ?

Re: Download content api

abhinavmishra14 — Mon, 28 Oct 2019 21:20:33 GMT

I am not aware if OOTB content download API can be customized to put the restrictions you are looking for. Someone else might provide more thoughts on this.

However you can look at this custom webscript, it may be helpful:

https://hub.alfresco.com/t5/alfresco-content-services-blog/downloading-content-from-alfresco-repository-via-custom-download/ba-p/288502

This is custom content download webscript which restircts a group of users from downloding the content.

Re: Download content api

bip1989 — Thu, 31 Oct 2019 16:03:54 GMT

Thanks for help, i was able to create custom download WebScript and able to control the downloads for the set of users.

I want to disable the OOTB download API, can someone help me or guide me if that can be done ?

Re: Download content api

cesarista — Thu, 31 Oct 2019 17:06:04 GMT

Hi:

You can disable / restrict this download uri in your Apache or nginx frontend.

Regards.

--C.

Re: Download content api

bip1989 — Thu, 31 Oct 2019 18:44:58 GMT

Will give it a try. I was hoping to disable at the repository level though

Re: Download content api

bip1989 — Fri, 01 Nov 2019 13:49:00 GMT

Able to stop users from accessing the OOTB download api by blocking them at proxy layer. It is a workaround