Thin Client - View but not download files

[dariuszm]

Autodesk Vault is able to add permission for Read/Write/Delete/Download. It will be good if users for Autodesk TC will have permission to View preview of file (Autodesk Viewer of PDF/dwf) but if they don't have download permissions option for downloading should be disable for them. Now if users permissions are configured for only read permissions, then can't view preview of files and getting error:

More details form Autodesk support:

[ihayesjr]

Note, disabling the download button means that for any file the viewer is unable to open, users will not be able to download those files.

[yw_seo]

Does Thin Client have a download button? Can you elaborate on the location?

[yw_seo]

@ihayesjr 

For example, I understand the explanation, but I can't confirm the setting that IPT,IDW files can't be downloaded and only DWF files can be viewed. You said you added the download permission directly to the file. Can you tell me how to do this?

@dariuszm 
I don't think there is a good way to modify the server's code. But if there is a way, it is possible. Could you elaborate on how to fix the code? I am not a developer.

[ihayesjr]

@yw_seo Make sure you are on version 2021 or higher of Vault which has the new download permission and the new Thin Client.

Vault 2021 Help | Download Permissions | Autodesk

[FormtekBen]

@ihayesjr 

We are using Vault Professional 2023 and would like to configure a user similar to your Shopfloor scenario described previously. To recap, the Shopfloor user would have the ability to view the file using the Thin Client but not be able to download the file. I set the Shopfloor user permission to Deny download. The user is unable to view the file in the Thin Client since download has been denied. Please explain how this is possible. Thanks.

[amit2]

If the permission is set to deny download, can the user on the shopfloor (with the thin client) view the visualization file? We are on Vault 2024

[ihayesjr]

@amit2 

Yes

[plausa.us]

@ihayesjr 

We have Vault Pro 2022 using Thin client for shops/rest of company.  Department heads were claiming shops were able to download and see previously released versions of files.  Therefore, accidently, manufacturing from an older print.  This is NOT the case!  They were only able to see latest released as it was set up per their groups in vault & how viewing was set up in Thin Client. 

Does not mean they did not download the file to their computers at a rev level, then it went thru ECO process.  Then for whatever unknown reason they went to their downloads to view a file vs check in Thin client again, God only knows what really happened.  It companies attempt to get rid of document control.

Because of the uproar, I did uncheck all the downloads in vault, that is when we found out they could then not see anything in Thin Client even thou 'read' was checked, took 10 minutes until I got the first call of what is up.

Why Read/download are tied together when they are clearly two different security fields.  I don't understand.  As you stated if they can view it, they can go thru the trouble and take a screen shot.   We don't have outsiders accessing our Thin client, although they do get documents sent to them with the whole NDR to manufacturer a part.  

I think if they security read/download worked so read could view, well would work for our company.  As for Thin client having a can't download button as you stated, it would be for any kind of document, all or nothing and any person or group, all or nothing.  

Are you saying if we had Vault Pro 2024 read yes, download no, now works in Thin Client they can still see the files and just not download?

[ihayesjr]

@plausa.us 

The Read permission allows the user to see the file in the file list but not view its contents. They can view all of the metadata (properties and property values).

To open the native file, the user needs the download permission.

For example, giving the download permission on an IPT allows the user to download the IPT. However, most people do not want this on the shop floor, so the user doesn't need the download permission on the IPT.

Viewing the visualization of the IPT is different. The download permission is needed for the DWF file associated to the IPT, not the IPT itself.

This applies to Vault 2022 since the download permission was introduced in that release.

"We have Vault Pro 2022 using Thin client for shops/rest of company.  Department heads were claiming shops were able to download and see previously released versions of files.  Therefore, accidently, manufacturing from an older print.  This is NOT the case!  They were only able to see latest released as it was set up per their groups in vault & how viewing was set up in Thin Client. "

Seeing only the latest released is a Thin Client setting that has nothing to do with the users' group.

[plausa.us]

What you state here may weirdly solve a different issue.  We don't want some to see WIP or QC files.  So it does sound like I could change the WIP/QC to Allow Read and keep the download to Deny.  Then they'd know there was a document out there with the part number/file name, but they are not allowed to see it.  VS it seem like the files does not exist at all.

Is that correct?

[ihayesjr]

Yes, that is correct.

[plausa.us]

@ihayesjr  - Very excited to change the settings in am before group shows to test this out.  Much appreciation.  Then we'll see if that is what the company 'really' desires, thank you.

[ihayesjr]

@plausa.us 

You may want to review this AU class to understand security.

Security Awakens: Defending Against the First Order | Autodesk University