Third Light Developer Exchange
You are not logged in.
- Topics: Active | Unanswered
Announcement
If you wish to join the Developer Exchange, please contact your account manager - this is to avoid unnecessary spam in the forums. Many thanks for your understanding.
#1 2021-04-28 16:06:39
- mtaylor
- Member
- Registered: 2021-04-26
- Posts: 4
Download Permissions
The ability to download assets (/files/{ID}/directurl) seems to be dependant on whether the API key corresponding to the user has "Share Link" permissions to the space in which the asset resides.
Is it possible to detect whether the API key we use has "Download" permissions when trying to fetch an asset to prevent users from getting access to assets they would not normally be able to in Chorus?
In a nutshell, how do we find out if a user could normally download a file or not in Chorus?
Offline
#2 2021-04-28 16:50:03
- dominic
- Third Light Staff
- Registered: 2013-06-06
- Posts: 119
Re: Download Permissions
Hi,
/rest/v1/files/{fileId}/temporaryDirectUrl does a "Download" rather than "Share as Link" permission check - the notable difference in behaviour is that this link is only valid for a limited period of time.
If you need more detail, Permissions.GetRights in the internal API returns which permissions the caller has on a file/folder.
(Generally, we would consider that "Share as Link" is a higher level permission than "Download", and that it would not normally make sense to configure a user to be able to publish but not directly download files.)
Dominic
Offline