Need help with Joomla? We are available for hire to help with Joomla customization, upgrades, maintenance, and custom development.
Explore our services
All questions about EDocman extension

Is access permission checked when viewing a document with Google Viewer?

  • Kevin Phil
  • Topic Author
  • Offline
  • New Member
  • New Member
More
1 hour 47 minutes ago - 1 hour 46 minutes ago #180160 by Kevin Phil
Hi,
I've noticed something odd with the Google Viewer option. The download link it generates has a "p=1" parameter in it, and I'm not sure the normal access rules still apply when that link is used.
I tried opening one of those links in a private window without logging in, and it seemed to work. I might be missing something, but it made me wonder if restricted documents are really protected in this case.Has anyone else seen this?
Could the team take a look?
Thanks!
Kevin
Last edit: 1 hour 46 minutes ago by Kevin Phil.

Please Log in or Create an account to join the conversation.

  • Mr. Dam
  • Away
  • Administrator
  • Administrator
More
1 hour 3 minutes ago #180161 by Mr. Dam
Hi Kevin,
Thanks for the feedback. We've looked into how documents are loaded in Google Viewer, and there will be a significant security improvement to that function in Edocman 4.2.
Please update when the new version is released. Thanks for helping us make Edocman better!
Regards,
Dam

Please Log in or Create an account to join the conversation.

Moderators: Mr. Dam