Question

Encryption URL to share documents

Laserfiche Administration Security

Updated March 18, 2014

asked on March 17, 2014

Dear Support,

Please advise us on the best method to secure a web link URL path, this URL is used to share documents but i don't want the user to change the path manually and access unauthorized documents.

I used the encrypted method that you recommended :

URL Encoding Reference
space	%20
"	%22
&	%26
(	%28
)	%29
,	%2C
{	%7B
}	%7D
:	%3A
;	%3B
=	%3D
[	%5B
]	%5D

but also they can change in the URL and access other document.

thank you

0 0

Answer

APPROVED ANSWER SELECTED ANSWER

replied on March 17, 2014

The way to address this is to ensure your entry access security is configured correctly. If a user does not have rights to access an entry, it won't matter if they can change the entry id since they won't be allowed to access it anyway.

1 0

Replies

replied on March 17, 2014 • Show version history

All access to the repository through WebLink and Web Access will have Laserfiche security enforced, and the products are not designed to incorporate any other type of security scheme. See this question for a related discussion, as well as the forum discussion linked from there.

1 0

replied on March 17, 2014 • Show version history

The URL encoding is not a method of encryption: it is used to replace non-ASCII, or reserved characters like { or = to ensure that the web server can interpret the URL correctly.

WebLink does not have a way to encrypt or obscure your URLs, but you can use Laserfiche security settings to ensure that users cannot view any documents they do not have rights to see, even if they navigate directly to the URL by changing the document ID.

1 0

replied on March 18, 2014

yes i know that i can use the laserfiche security but i have thousands of users every week in a hospital that they want to access their laboratory examination and each week i want to delete number and users and generate new ones.

any advice?

0 0

replied on March 18, 2014

Can you automate the creation of users and assignment of access rights? Especially in a scenario where medical information is involved taking shortcuts with security is a huge risk, and the only solution that I wouldn't categorize as a shortcut is using built-in Laserfiche security.

1 0

You are not allowed to follow up in this post.

Question

Question

Encryption URL to share documents

Answer

Replies

Sign in to reply to this post.