 |
|
|
|
|
test announcement from Notepad |
|
|
|
|
|
|
|
You are here: test QA > test announcement from Notepad
|
|
|
Issue b An uploaded file in shared files feature could be accessed by saving the URL on ones browser, irrespective of the security settings of a particular folder.
This was a growing concern among existing ReadyPortal customers as shared files contained sensitive documents.
Solution b The extra layer of file depot security was introduced to solve this
above-mentioned problem. The logic for security check will be the same as it is for existing shared files feature.
Example - if one surfed to a page containing a shared file feature that was secured (members/admins only), the portal accordingly would reject the user and redirect him/her to the login page. One would also be rejected if one tried to directly access any of the contents in shared file via typing in the URL.
Basically it means that if the security settings (access policies) on shared files folder is set to "Anyone" then typing in a direct URL will work. However, if the security settings are b Members Onlyb or b Admins Onlyb then one will have to go through the site or at minimum will have to log in to the site and get to the files. If one tries to access the content of a members/admins only folder it will result in a 404 error such as
http://members.healthcaredistribution.org/file_depot/0-10000000/0-10000/1304/folder/21471/8-15-02_loc_confc-min.pdf
This extra layer of shared file security bypasses site/page/content module security. Therefore if one has a public folder (policies set to b Anyoneb ) on an admin/member only page the content of the folder (files) would still be accessible if one types the URL directly. This was done keeping in mind that most of the site graphics are on an admin only page, in a folder that is set to b Anyone can viewb .
Example - http://www.iienetwork.org/file_depot/0-10000000/0-10000/1710/folder/10455/IIENetworker2
Please post your questions regarding this feature on the Product Questions discussion board under the topic b File member delete featureb .
Thanks,
Rajiv
|
|
|
|
|
|
|
|
