Solved

Allow user to open a file from an Application, but not let them access the file through windows explorer

Posted on 2013-12-18
8
201 Views
Last Modified: 2013-12-23
I have an application that allow users to open drawings for parts (Pdf Files) from a Link in our ERP.  The files are stored in a directory called DWG (we use dfs) on a file server.

I don't want the user to "see" the files in the dwg folder, I only want them to be able to open the files using our ERP application.  I have tried tweaking security but it seems like I have to give them read and list to be able to view the files.

Is there anything I can do to a folder that allows them to open a file in read only from a hyperlink that does not allow them to go to the folder itself and list / open files?

Our Erp shows the file path, so using a hidden share would not help.

Any Help is Appreciated.
0
Comment
Question by:BFanguy
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
8 Comments
 
LVL 95

Accepted Solution

by:
John Hurst earned 500 total points
ID: 39726713
Any well written application uses Windows Explorer functions to open and save files. So you need the Windows Explorer permissions you have listed and then, yes, Windows Explorer can see the same files.

... Thinkpads_User
0
 
LVL 3

Expert Comment

by:spamsucks72
ID: 39726774
My suggestion would be to work with the security within the ERP software (access/authorization):

- Is the ERP application using windows AD as the access/authorization service or does it have its own?  
- Meaning in order for users to get access the ERP app they have to be in a ERP group or does the ERP have a service account that handles the access and files?  

If the ERP has the option to use a service account then it should have it's own access/auth system meaning you assign people groups to the files with in the ERP app.  

If windows is controlling the access then you will have to look at how your folder structure is setup meaning ... nested folders with admin rights on the top and specific user/groups the more nested you go (this can get complicated and be a pain bc you will be adding/removing groups depending on what access).
0
 

Author Comment

by:BFanguy
ID: 39726855
Thanks guys.

We are using security in our ERP on who can open the programs that gets to the links.

We are trying to MAKE them use the ERP to get to the links as opposed to open the Folder and finding the file they want - that is why I would like to stop them from being able to list the folder contents - also we don't want them to be able to bulk print the drawings.

I have tired all kind of combinations of checking / unchecking Traverse Folder / Execute file, List folder / Read Permission.... none give me the desired results.
0
The Ultimate Checklist to Optimize Your Website

Websites are getting bigger and complicated by the day. Video, images, custom fonts are all great for showcasing your product/service. But the price to pay in terms of reduced page load times and ultimately, decreased sales, can lead to some difficult decisions about what to cut.

 

Author Comment

by:BFanguy
ID: 39736264
does not look like it is possible to be able to open a file in a folder and not have the user be able to traverse the folder and see the files and open them from there.
0
 

Author Comment

by:BFanguy
ID: 39736279
I've requested that this question be closed as follows:

Accepted answer: 0 points for BFanguy's comment #a39736264

for the following reason:

does not look like this is possible.
0
 
LVL 95

Expert Comment

by:John Hurst
ID: 39736280
That is what I suggested to you in my post http://#a39726713

Accordingly you should accept a solution rather than your own comment which is the same thing.

... Thinkpads_User
0
 

Author Closing Comment

by:BFanguy
ID: 39736291
agree,  it is not possible to do what I wanted.
0
 
LVL 95

Expert Comment

by:John Hurst
ID: 39736296
@BFanguy - Thanks for following up, and I was happy to help.

.... Thinkpads_User
0

Featured Post

Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

1. Boot PC and press F10, select storage options and change the compatibility from “AHCI” to “IDE”, save and exit 2. Boot PC and press F12 3. Upon PXE display of searching for DHCP server, press Pause break to obtain MAC address 3. Open Configu…
Have you considered what group policies are backwards and forwards compatible? Windows Active Directory servers and clients use group policy templates to deploy sets of policies within your domain. But, there is a catch to deploying policies. The…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question