Solved

Allow user to open a file from an Application, but not let them access the file through windows explorer

Posted on 2013-12-18
8
200 Views
Last Modified: 2013-12-23
I have an application that allow users to open drawings for parts (Pdf Files) from a Link in our ERP.  The files are stored in a directory called DWG (we use dfs) on a file server.

I don't want the user to "see" the files in the dwg folder, I only want them to be able to open the files using our ERP application.  I have tried tweaking security but it seems like I have to give them read and list to be able to view the files.

Is there anything I can do to a folder that allows them to open a file in read only from a hyperlink that does not allow them to go to the folder itself and list / open files?

Our Erp shows the file path, so using a hidden share would not help.

Any Help is Appreciated.
0
Comment
Question by:BFanguy
  • 4
  • 3
8 Comments
 
LVL 94

Accepted Solution

by:
John Hurst earned 500 total points
ID: 39726713
Any well written application uses Windows Explorer functions to open and save files. So you need the Windows Explorer permissions you have listed and then, yes, Windows Explorer can see the same files.

... Thinkpads_User
0
 
LVL 3

Expert Comment

by:spamsucks72
ID: 39726774
My suggestion would be to work with the security within the ERP software (access/authorization):

- Is the ERP application using windows AD as the access/authorization service or does it have its own?  
- Meaning in order for users to get access the ERP app they have to be in a ERP group or does the ERP have a service account that handles the access and files?  

If the ERP has the option to use a service account then it should have it's own access/auth system meaning you assign people groups to the files with in the ERP app.  

If windows is controlling the access then you will have to look at how your folder structure is setup meaning ... nested folders with admin rights on the top and specific user/groups the more nested you go (this can get complicated and be a pain bc you will be adding/removing groups depending on what access).
0
 

Author Comment

by:BFanguy
ID: 39726855
Thanks guys.

We are using security in our ERP on who can open the programs that gets to the links.

We are trying to MAKE them use the ERP to get to the links as opposed to open the Folder and finding the file they want - that is why I would like to stop them from being able to list the folder contents - also we don't want them to be able to bulk print the drawings.

I have tired all kind of combinations of checking / unchecking Traverse Folder / Execute file, List folder / Read Permission.... none give me the desired results.
0
MIM Survival Guide for Service Desk Managers

Major incidents can send mastered service desk processes into disorder. Systems and tools produce the data needed to resolve these incidents, but your challenge is getting that information to the right people fast. Check out the Survival Guide and begin bringing order to chaos.

 

Author Comment

by:BFanguy
ID: 39736264
does not look like it is possible to be able to open a file in a folder and not have the user be able to traverse the folder and see the files and open them from there.
0
 

Author Comment

by:BFanguy
ID: 39736279
I've requested that this question be closed as follows:

Accepted answer: 0 points for BFanguy's comment #a39736264

for the following reason:

does not look like this is possible.
0
 
LVL 94

Expert Comment

by:John Hurst
ID: 39736280
That is what I suggested to you in my post http://#a39726713

Accordingly you should accept a solution rather than your own comment which is the same thing.

... Thinkpads_User
0
 

Author Closing Comment

by:BFanguy
ID: 39736291
agree,  it is not possible to do what I wanted.
0
 
LVL 94

Expert Comment

by:John Hurst
ID: 39736296
@BFanguy - Thanks for following up, and I was happy to help.

.... Thinkpads_User
0

Featured Post

Webinar: Aligning, Automating, Winning

Join Dan Russo, Senior Manager of Operations Intelligence, for an in-depth discussion on how Dealertrack, leading provider of integrated digital solutions for the automotive industry, transformed their DevOps processes to increase collaboration and move with greater velocity.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

On a regular basis I get questions about slow RDP performance, RDP connection problems, strange errors and even BSOD, remote computers freezing or restarting after initiation of a remote session. In a lot of this cases the quick solutions made b…
Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below. https://filedb.experts-exchange.com/incoming/2017/03_w12/1151775/Permutations.txt https://filedb.experts-exchange.com/incoming/201…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question