nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

How to restrict public access to document shared by external link ?

benjamindupont

Hi there,

Currently, when I want to directly access to a document with a shared link, I don't need to be logged for accessing to the preview and download it. It's big security hole for me, because I don't want anybody can access to document if he have the link.

Do you know how can I restrict the access to document, for only logged users ?

Thanks in advance.

Find more posts tagged with

Alfresco Content Services

Comments

afaust

Simply do not use the shared links in this case. These will always be public - that is the whole point. Use permissions on the document itself to manage access for logged in users.

benjamindupont

Thanks for your quick reply. Too bad that we can't manage this...

So, I've 2 questions :

- Like it's mentionned in this thread : is there a way to know which files are shared ?

- In the user's rights, can we manage the right to have or not the shared button ?

afaust

As an administrator / power user you can certainly perform a query for shared documents. They should all have a very specific aspect applied (don't know the name right now).

There are no default permissions regarding public sharing links that can be assigned to / revoked from users to limit this functionality. If a user can see the document they can share it. Typically, in most of the Alfresco projects I have worked in we completely remove these social features from the document library.

benjamindupont

OK, thanks for your replies !

cesarista

Hi Benjamin:

To know which files are shared you can type in Alfresco search --> ASPECT:'qshare:shared'

You can use this search for example with the help of a smart folder:

How to manage public content in Alfresco with the help of virtual folders - Virtual Folders for dealing with public docu…

Regards.

--C.

benjamindupont

Hi Cesar,

Thanks for your reply. I try to search with the alfresco share search bar but it doesn't return anything... And I try with the smart folder but there is the same result... Do you have an idea why I don't have any result ?

cesarista

It should give results, if you have content with public urls (shared). The smart folder does similar search queries. If you can not find anything maybe you have problems with your indices...

Regards.

--C.

benjamindupont

Thanks a lot Cesar for this tip, it works well with a rule on the folder !

To conclude, could you just advise me on how to reduce the scope on an precise Alfresco site, in the search with a smart folder (json) and in the rule to delete the shared link (js) ?

Best regards,

Benjamin

cesarista

Hi Benjamin:

In the smart folder query you can do something like this:

zk-smart-folder-templates/qsharedFolder.json at master · CesarCapillas/zk-smart-folder-templates · GitHub

This makes it to apply under the actual path when the smart folder is applied (for example in a site).

In the script you may include something like:

search.luceneSearch('+PATH:"/app:company_home/st:sites/cm:<short-site-name>/cm:documentlibrary" +ASPECT:"qshare:shared"')

Regards.

--C.