Watermarked download and package issue: process and rights
Request path, checks, password-protected ZIP and separate function keys of the Folders whole-folder watermarked download and of the package issue to a user.
The two issue paths of Folders use the common download request process: a request and its items are created, and the watermark is produced in memory at download time. The request and its items are the rows of the issue register.
Process
- Whole download (
downloadright): a request without recipient for the whole shared folder in the admin's own name; status polled every 2 seconds, then download. - Package issue (
issueright): a request with the recipient ID; watermark and register carry the recipient's name, the issuer is the admin. - Checks: the folder exists; the recipient is a user of the folder; for an NDA-required folder a valid agreement (otherwise the NDA error message); the password is empty or 8–128 characters.
- The password travels in the POST to the download and is not stored; only the
encryptedflag is set on the request. With a password the package is an AES-256 encrypted ZIP. - Files that cannot be watermarked (Word, Excel, video) are left out and recorded as items of kind
skip.
Data
Table names carry the installation's own prefix in the database. Request: doc_download (source = admin, issued_by, doc_ids, encrypted); items: doc_download_item with the watermark code and the original's SHA-256. Details are in the issue register system description.
Permissions
- Function rights:
document/foldersdownload(whole download) andissue(package issue).issueis a key of its own: the edit right does not include it. - Content scope: the folder and the recipient's assignment are checked; in the issue register the scope follows the document's company.