topic Re: How to disable document's link generated by Nuxeo after document gets trashed? in Nuxeo Forum

How to disable document's link generated by Nuxeo after document gets trashed?

Ankush_Bandil — Fri, 19 Jun 2020 07:33:42 GMT

I have uploaded a document in Nuxeo and got a link. I can download my document accessing that link. Now, I trashed my document and got "isTrashed": true as well but still I can download my document using the link which is generated by Nuxeo. Is there any way by which I can restrict access to that URL after a document is trashed?

Re: How to disable document's link generated by Nuxeo after document gets trashed?

Gregory_Carlin — Sat, 20 Jun 2020 19:23:29 GMT

Hello,

Settting a document to trash only update the ecm:isTrashed propertty value but doesn't have an impact on the URL. This allows you to easily untrash a documentt (and consequenttly, not ot regenerate an URL). For this use case, it probably needs to implement a custom secutiry policy (https://doc.nuxeo.com/nxdoc/security-policy-service/ ).

With something like this in your checkPermission method:

Boolean isTrashed = Optional.ofNullable((Boolean) doc.getValue("ecm:isTrashed"))
                    .orElse(Boolean.FALSE);
            if (isTrashed) {
                return Access.DENY;
            }
	     else {
		 return Access.UNKNOWN
            }

Re: How to disable document's link generated by Nuxeo after document gets trashed?

Rodri_ — Sun, 21 Jun 2020 08:55:24 GMT

Hi. I think you wanted to put "isConfidential" in the "if" condition; or to call the Boolean "isTrashed"! Regards.

Re: How to disable document's link generated by Nuxeo after document gets trashed?

Gregory_Carlin — Sun, 21 Jun 2020 16:02:05 GMT

Indeed! Updated