i don´t know if you still need to disable the download action or if you already found a solution, i had the same issue and after looking everywhere and not finding nothing i decided to give it a try myself and this is what i came up with,i realized that when you login as admin there is some admin specific actions that no other user can see so i thought there must be a way to do the same for the download action, so whar i did was to look in the xml file containing that behavior, which is "document-actions.get.config.xml" and change the permissions, for example, if i wanted that a user could download the file, i changed his role to collaborator which has "edit" permissions, so i set the download to "permissions=edit" and if i didn´t want the user to be able to download i change the role of the user to contributor or consumer and then they couldn´t see the download action button.Don´t forget to backup before you do any changesHere´s a piece of code from the original xml file regarding the download behavior:
<action type="simple-link" id="onActionDownload" href="{downloadUrl}" label="actions.document.download" />
<action type="simple-link" id="onActionView" href="{viewUrl}" label="actions.document.view" />
<action type="simple-link" id="onActionDetails" permission="edit" href="{editMetadataUrl}" label="actions.document.edit-metadata" />
Note that "onActionDownload" which is the download action, and "onActionView" which is the view in browser action, don´t have a permission so everybody can see it, on the other hand, "onActionDetails", which is the "Edit Metadata" action have permission=edit", only user with editing privileges ( Admin, SiteManagers and Collaborators ) can see that action button.So if you only want user with "Edit" privileges to be able to download files, set the permission as is:
<action type="simple-link" id="onActionDownload" permission="edit" href="{downloadUrl}" label="actions.document.download" />
<action type="simple-link" id="onActionView" permission="edit" href="{viewUrl}" label="actions.document.view" />
<action type="simple-link" id="onActionDetails" permission="edit" href="{editMetadataUrl}" label="actions.document.edit-metadata" />
This way not only they won´t be able to download it but also they will not be able to see it in the browser and easily make a copy from there. There´s several lines in the same xml file regarding download and view, so change them all. You will have to do the same for the folder-actions.get.config.xml.For added security, if you only want the admin or sitemanager to be able to download, set the permissions to permission="delete", so only users with Delete privileges can download.Unfortunately, Alfresco Share being such a wonderful collaboration app, it has two other ways of downloading the file, in the Version History there is also a download button, and in the Sharing section you can see the download url for the file, so what i did is to add an <#if user.isAdmin> tag to the document-versions.get.html.ftl.Here´s the original piece of code regarding the download button, its almost at the end of the file:
<div class="actions">
<span><a href="${url.context}/proxy/alfresco${version.downloadURL}" class="download">${msg("link.download")}</a></span>
<#if version_index != 0>
<span><a id="${args.htmlid}-revert-a-${version_index}" class="revert" href="#">${msg("link.revert")}</a></span>
</#if>
</div>
And this is the code that will only allow the Admin to see that button:
<div class="actions">
<#if user.isAdmin>
<span><a href="${url.context}/proxy/alfresco${version.downloadURL}" class="download">${msg("link.download")}</a></span>
</#if>
<#if version_index != 0>
<span><a id="${args.htmlid}-revert-a-${version_index}" class="revert" href="#">${msg("link.revert")}</a></span>
</#if>
</div>
Now for the document-links you can do the same to hide the "download file url" and "document url"<!– download link –>
<#if user.isAdmin>
<div id="${args.htmlid}-download" class="hidden">
<div class="url-title"><label for="${args.htmlid}-download-url">${msg("document-links.download")}</label></div>
<input id="${args.htmlid}-download-url" class="link-value" />
<input id="${args.htmlid}-download-button" type="button" class="copy-button" value="${msg("document-links.copy")}" />
</div>
<!– document/view link –>
<div id="${args.htmlid}-view" class="hidden">
<div class="url-title"><label for="${args.htmlid}-view-url">${msg("document-links.view")}</label></div>
<input id="${args.htmlid}-view-url" class="link-value" />
<input id="${args.htmlid}-view-button" type="button" class="copy-button" value="${msg("document-links.copy")}" />
</div>
<#if repositoryUrl??>
<!– webdav link –>
<div id="${args.htmlid}-webdav" class="hidden">
<div class="url-title"><label for="${args.htmlid}-webdav-url">${msg("document-links.webdav")}</label></div>
<input id="${args.htmlid}-webdav-url" class="link-value" />
<input id="${args.htmlid}-webdav-button" type="button" class="copy-button" value="${msg("document-links.copy")}" />
</div>
</#if>
<#– cifs link (N/A)
<div id="${args.htmlid}-cifs" class="hidden">
<div class="url-title"><label for="${args.htmlid}-cifs-url">${msg("document-links.cifs")}</label></div>
<input id="${args.htmlid}-cifs-url" class="link-value" />
<input id="${args.htmlid}-cifs-button" type="button" class="copy-button" value="${msg("document-links.copy")}" />
</div> –>
</#if>
<!– page link –>
<div id="${args.htmlid}-page">
Hopefully i explained myself and maybe i helped with this issue.
