Documents can be downloaded without a username PWD
Comments
-
Hey support,
I have a custom workflow that returns a URL which can be used to download a file which has been saved as a document. The pattern I used was recommended by Will and generates a URL like this:
Get pdf:
The problem is, this URL doesn’t require credentials to access. It’s in the wide world, so it could be exploited. Is there a way to rewrite the URL so that it can’t be run without credentials and the file can still be downloaded?
-
Hi,
The RequestInfo Parameter Contains an Encrypted SessionID to use for Authentication. I would recommend that you remove it and only send in the DocumentID if you want to make sure that the User Logs into the Portal before downloading.
Howdy, Stranger!
Categories
- 4.4K All Categories
- 80 General
- 13 Training
- 209 Installation / Setup
- 1.1K Flows
- 110 Rules
- 270 Administration
- 213 Portal
- 497 General Q & A
- 709 Forms
- 345 Reports
- 3 Designer Extensions
- 48 Example Flows
- 58 CSS Examples
- 1 Diagram Tile
- 7 Javascript Controls
- 186 Pages
- 5 Process Mining
- New Features
- 186 Datastructures
- 70 Repository
- 229 Integrations
- 29 Multi-Tenant
- 27 SDK
- 81 Modules
- 59 Settings
- 26 Active Directory
- 12 Version 7
- 35 Version 8
- 143 Lunch And Learn Questions