Document Security - read-only, no download

We have a site on our system that needs to be able to let the owner post documents for others to read, but not be able to download them from the site. I am wondering how to set this sort of security on documents for this one site.

Greg

2 answers

1 accepted

Hi Greg,

To prevent attachment downloads you will need to edit the velocity files in your <Confluence_Install_Directory> as described in this document: https://confluence.atlassian.com/pages/viewpage.action?pageId=215484007

You should only do this if you know what you're doing, you have thoroughly tested it and you have understood that you will need to rollback the customisation for upgrades, (and reapply it again afterwards), but I believe this is your best solution.

However, this solution disables downloading of attachments for everyone, admins included, so you would need to work out a way of accessing the files from the file system as they will be unavailable from the application. One solution for that would be to only apply the customisation to one Space and then move the pages to a new Space that the users cannot access, as this would allow you to still download the attachments from the application, (presumably a preferrable solution).

All the best,
John

3 votes

That's actually totally impossible.

When your browser displays the content of a file, then it's downloaded it. There's no such thing as "read without downloading". There are tricks to obscure things and make it more difficult (e.g. displaying files as images, or providing them in locked formats), but there's no useful way to stop someone who is determined from getting a copy of what you've posted.

Thanks, I know that ther is no 100% way to stop it, but I do want to make it difficult for people to do for this page.

Suggest an answer

Log in or Sign up to answer
Atlassian Community Anniversary

Happy Anniversary, Atlassian Community!

This community is celebrating its one-year anniversary and Atlassian co-founder Mike Cannon-Brookes has all the feels.

Read more
Community showcase
Kesha Thillainayagam
Posted Apr 13, 2018 in Confluence

We want to hear how your non-technical teams are using Confluence!

Hi Community! Kesha (kay-sha) from the Confluence marketing team here! Can you share stories with us on how your non-technical (think Marketing, Sales, HR, legal, etc.) teams are using Confluen...

2,821 views 27 11
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you