Watermarked download and package issue: process and rights

Request path, checks, password-protected ZIP and separate function keys of the Folders whole-folder watermarked download and of the package issue to a user.

The two issue paths of Folders use the common download request process: a request and its items are created, and the watermark is produced in memory at download time. The request and its items are the rows of the issue register.

Process

  1. Whole download (download right): a request without recipient for the whole shared folder in the admin's own name; status polled every 2 seconds, then download.
  2. Package issue (issue right): a request with the recipient ID; watermark and register carry the recipient's name, the issuer is the admin.
  3. Checks: the folder exists; the recipient is a user of the folder; for an NDA-required folder a valid agreement (otherwise the NDA error message); the password is empty or 8–128 characters.
  4. The password travels in the POST to the download and is not stored; only the encrypted flag is set on the request. With a password the package is an AES-256 encrypted ZIP.
  5. Files that cannot be watermarked (Word, Excel, video) are left out and recorded as items of kind skip.

Data

Table names carry the installation's own prefix in the database. Request: doc_download (source = admin, issued_by, doc_ids, encrypted); items: doc_download_item with the watermark code and the original's SHA-256. Details are in the issue register system description.

Permissions

  • Function rights: document/folders download (whole download) and issue (package issue). issue is a key of its own: the edit right does not include it.
  • Content scope: the folder and the recipient's assignment are checked; in the issue register the scope follows the document's company.