Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Expose Onlyoffice document permissions in config #93

Open
mmccarn opened this issue Jun 15, 2019 · 2 comments
Open

Expose Onlyoffice document permissions in config #93

mmccarn opened this issue Jun 15, 2019 · 2 comments
Labels
enhancement New feature or request

Comments

@mmccarn
Copy link

mmccarn commented Jun 15, 2019

(my) objective:

  • Use Nextcloud for sharing of sensitive data that I don't trust in Google, Dropbox or OneDrive
  • Allow users to view the shared files without leaking sensitive information into their local downloads or web cache.
  • [future - not covered here] allow data download only from approved devices - so that users can view the information on the mobile or home computer, but cannot download it anywhere outside of the office.

tentative solution:

  • Install Onlyoffice for document viewing
  • Configure onlyoffice to prevent editing, downloading, or printing of content

how:
Option 1: global settings

  • edit NC/apps/onlyoffice/controller/editorcontroller.php to force permissions. I have done this manually on my system based on the Onlyoffice API Permissions documentation by adding the code below at line 586, which seems to do what I want:
if (!array_key_exists("permissions", $params["document"])) {
                $params["document"]["permissions"] = [];
            }
$params["document"]["permissions"]["comment"] = false;
$params["document"]["permissions"]["download"] = false;
$params["document"]["permissions"]["edit"] = false;
$params["document"]["permissions"]["fillForms"] = false;
$params["document"]["permissions"]["print"] = false;
$params["document"]["permissions"]["review"] = false;

Option 2: expose the above settings in the Onlyoffice app configurations

Option 3: expose the above settings in the ONLYOFFICE settings plus another setting for enhanced permissions by user group

Option 4 (not supported by NC core, as far as I know): restrict maximum permissions by device. If added to option 3, users with enhanced permissions would only be able to leverage those permissions if they are also on an authorized device

@LinneyS
Copy link
Member

LinneyS commented Dec 27, 2019

Hi @mmccarn
We are discussing with Nextcloud the possibility of expanding the list of rights.

@metorm
Copy link

metorm commented Apr 24, 2024

I want this feature, too!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants