Question

Lock Down Permissions in Web Client Options

Laserfiche Web Client Security

Updated June 9, 2020

asked on January 24, 2018 • Show version history

We have a user on our network who we need to lock out of their Web Client account permissions. More specifically, the Options > New Document tab (and even more specifically, the checkbox for "Keep original PDF files").

As an admin, I will still need the ability to make changes there if necessary, however, we DO NOT want them to have access to this page (see screenshot). Is there a way to lock this down and prevent them from making changes to it? Any help would be greatly appreciated!

Permissions.JPG (100.54 KB)

| Download

0 0

Replies

replied on January 24, 2018

Hi Ryan,

Check out the help information on Settings Lockdown. It describes how to restrict users from changing certain options, such as this one.

0 0

View 2 previous replies

replied on January 24, 2018 • Show version history

Appreciate it Justin! I'll give it a go tomorrow to see what I can find out.

0 0

replied on January 25, 2018

Hey Justin,

Just to give you an update on this situation - I attempted to do as those instructions indicated, and was able to successfully lock down several features with the AdvancedImport option. Unfortunately, the setting in question was not one of them. I'm currently in a support queue with Laserfiche to hopefully get this answered. I believe I may have found the attribute in question ([WebAccess] KeepPDFAfterImport), but have not found out a way to prevent users from editing that checkbox. I'll update this Answers page when I hear back from them.

0 0

replied on January 26, 2018

I was working with Ryan on this and they refused to answer our question in the support ticket and directed me back here.

"I need a statement from Laserfiche as to whether the [Webaccess]KeepPDFFiles setting can be locked down for a user.
The Client would be satisfied with being able to lock down all settings for the user as well but all I could find in lockdown settings was these five categories here.

https://support.laserfiche.com/devnotes/viewer?name=WebAccess%2FSettings_Lockdown

A screen shot of the field in question
https://www.screencast.com/t/SW2bKW5Y "

The sooner we can get Ryan an answer the better.

0 0

replied on January 26, 2018

Hi Ryan and Jason,

It looks like I spoke to soon and this specific option is not covered by the file import lockout option. I'll see about getting it included.

0 0

replied on January 26, 2018

Hey Justin, as Jason stated above, while locking the client account (it's a specific user) out of that specific permission would be the ideal, I'm also perfectly fine locking out the user from their Web Client options altogether if that's easier and I can still, as the administrator, retain the ability to go in and make changes to their account. If that's accomplish-able by modifying that user's attributes, I'm perfectly ok with that as well.

0 0

replied on June 9, 2020

@████████ from the looks of the help file it still appears that there is still no way to lock settings for the [Webaccess]KeepPDFFiles or [Settings]KeepPDFFiles or to completely lock users from making any changes to settings.

Where is this on the road map? As a large enterprise, we need a way to better manage user attributes so that a user cannot change settings.

While I'm asking, it would be much more useful to be able to set attributes by Repository Group in addition to the Everyone group.

Thanks

0 0

replied on June 9, 2020 • Show version history

Hi Craig,

I'll follow-up on the status of this item, and if it has been able to be added or, if not, if there's a timeframe.

To be clear, you can do lockdown by group, it's just always configured on the everyone attribute. But the SID you can provide can be that of a group. It has to do with where the application is looking for the information.

0 0

You are not allowed to follow up in this post.

Question

Question

Lock Down Permissions in Web Client Options

Replies

Sign in to reply to this post.