Solved

Allow user to open a file from an Application, but not let them access the file through windows explorer

Posted on 2013-12-18
8
195 Views
Last Modified: 2013-12-23
I have an application that allow users to open drawings for parts (Pdf Files) from a Link in our ERP.  The files are stored in a directory called DWG (we use dfs) on a file server.

I don't want the user to "see" the files in the dwg folder, I only want them to be able to open the files using our ERP application.  I have tried tweaking security but it seems like I have to give them read and list to be able to view the files.

Is there anything I can do to a folder that allows them to open a file in read only from a hyperlink that does not allow them to go to the folder itself and list / open files?

Our Erp shows the file path, so using a hidden share would not help.

Any Help is Appreciated.
0
Comment
Question by:BFanguy
  • 4
  • 3
8 Comments
 
LVL 90

Accepted Solution

by:
John Hurst earned 500 total points
ID: 39726713
Any well written application uses Windows Explorer functions to open and save files. So you need the Windows Explorer permissions you have listed and then, yes, Windows Explorer can see the same files.

... Thinkpads_User
0
 
LVL 3

Expert Comment

by:spamsucks72
ID: 39726774
My suggestion would be to work with the security within the ERP software (access/authorization):

- Is the ERP application using windows AD as the access/authorization service or does it have its own?  
- Meaning in order for users to get access the ERP app they have to be in a ERP group or does the ERP have a service account that handles the access and files?  

If the ERP has the option to use a service account then it should have it's own access/auth system meaning you assign people groups to the files with in the ERP app.  

If windows is controlling the access then you will have to look at how your folder structure is setup meaning ... nested folders with admin rights on the top and specific user/groups the more nested you go (this can get complicated and be a pain bc you will be adding/removing groups depending on what access).
0
 

Author Comment

by:BFanguy
ID: 39726855
Thanks guys.

We are using security in our ERP on who can open the programs that gets to the links.

We are trying to MAKE them use the ERP to get to the links as opposed to open the Folder and finding the file they want - that is why I would like to stop them from being able to list the folder contents - also we don't want them to be able to bulk print the drawings.

I have tired all kind of combinations of checking / unchecking Traverse Folder / Execute file, List folder / Read Permission.... none give me the desired results.
0
 

Author Comment

by:BFanguy
ID: 39736264
does not look like it is possible to be able to open a file in a folder and not have the user be able to traverse the folder and see the files and open them from there.
0
Want to promote your upcoming event?

Attending an event? Speaking at a conference? Or exhibiting at a tradeshow? Easily inform your contacts by using a promotional banner in your email signature. This will ensure your organization’s most important contacts are in the know.

 

Author Comment

by:BFanguy
ID: 39736279
I've requested that this question be closed as follows:

Accepted answer: 0 points for BFanguy's comment #a39736264

for the following reason:

does not look like this is possible.
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 39736280
That is what I suggested to you in my post http://#a39726713

Accordingly you should accept a solution rather than your own comment which is the same thing.

... Thinkpads_User
0
 

Author Closing Comment

by:BFanguy
ID: 39736291
agree,  it is not possible to do what I wanted.
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 39736296
@BFanguy - Thanks for following up, and I was happy to help.

.... Thinkpads_User
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

My previous article  (http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/A_4466-A-beginners-guide-to-installing-SCCM2007-on-Windows-2008-R2-Server.html)detailed one possible method to get SCCM 2007 installed an…
Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip is around source server preparation. No migration is an easy migration, there is a…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now