Secure Document Retrieval

asked on September 1, 2016

Dears,

We have a scenario as follows :

A company has more than 4 million customers and each customer in Laserfiche repository has a folder. The company needs to give access to their customers for some of their documents from the company portal that they have.

I (and the company) see that creating 4 million users in the Laserfiche Repository to grant access for each user to its documents is illogic.

If we don’t set a security on the documents and we use weblink SEARCH URL to do the job with a saved account:
- No possible way to encode the URL.
- No possible way to download the document from the search URL.

Using the SDK, It is not also possible:
- Not possible to make a connection by each user credential as creating 4 million users is not possible.
- Not possible to use one user as maximum 4 connections simultaneously can be done.

Please could you suggest a solution?

thx

0 0

replied on September 21, 2016

Hi Maher,

Because each user would have a different view of the repository, they would each need to have their own credentials. The other requirement for these users is that they are marked as read-only users, whether done on an individual basis or by placing them all into a group that is marked as read-only. This setting designates them as WebLink users and thus gives them Public Portal access. You will of course want to automate these steps (create users, mark as read-only, set security), and there are multiple ways to do so.

To automate user definitions, you can export a standard user account to give yourself an XML file, which you can then manipulate and clone to build new users; Justin Pava outlines this process in this related Answers post. Another method for user creation using the SDK is suggested here, and without the SDK here.

To mark users as read-only, you can place them all into a group that is set as read-only. There are two SDK scripts that accomplish this here and here.

For setting security on users, you can use Workflow's Assign Rights activity, which can set Entry Access Rights on the users' folders. Be sure to select the "Inherit rights from parent for not specified above" checkbox to retain access for those internal users that can currently view those folders.

0 0

Question

Question

Replies

Sign in to reply to this post.