I'm providing a very specific access into our repository for some outside partners. It involves giving them a limited set of capabilities to one document at a time. The problem that I'm seeing, is that even without browse permissions, they can still click the back button that's provided in the document viewer and see everything in the parent folder. I also want to disable access to the user menu.

It's not the end of the world, but it will be confusing in the context that it's done in, since the users may be inclined to think that "Back" will behave like the browser back button. In this case, they followed a deep link to the current document, which opened in a new tab.

My current tack is to use mode=embed in the URL. This gets rid of the whole top bar, which works great, but it seems to override [WADocView]ShowThumbnailPane so that the thumbnail pane is always hidden. The users can still show it, but it would be nice to default to having it shown.