5: Re: Download An Archive (response to 2)
Posted by Alan-Parry (Euphonix Admin). on

Joe,

Picking up on a comment in your reply, does it mean that if someone other than a local administrator downloading a zip folder will/may also capture any hidden folders that may or may not contain sensitive information in files within these folders?  We use some folders that are only visible to admins or nominated committee members with sensitive information (e.g. records of meetings).  So for all intents and purposes they are not visible to others within the organisation.  If any user can download a folder (including the overall files folder) to an external zip-folder that has "hidden" sub-folders will they be able to discover this hidden information whether that was their original intention or not?

In which case either remove the facility completely from across the board or restrict its use to local administrators (with separate controlled passwords) if other users still want it.

Regards

Alan

7: Re: Download An Archive (response to 5)
Posted by Alan-Parry (Euphonix Admin). on

Hi Joe,

I've just returned from a rehearsal and it appears that more than 1 person has been using the Archive facility to download, in bulk, music (mp3) files.  People already download pdf files, but there is a particular issue with being able to download other file types.  This problem has only now come to light because one of the MP3 music files had a question-mark in the title, and being a special character caused the issue, otherwise I would have been none the wiser.

Can I suggest that the download Archive folder is a permission set locally (and could perhaps re-named bulk download).  So, whilst the top level folder and those below it have the archive facility retained for local admins, non-admins would only be permitted to bulk download files only if local admins allowed it.  A variation on this approach which would seem to be more complicated would be for local admins to have the facilty of a tick-box linked to each visible file in a folder to create a download button/link (although for pdf files this wouldn't be necessary). 

There is already a means to download things like music files.  But this means using a PC with the mouse by right-clicking and then saving the target.  There maybe a means to save a MP3 file to a tablet or mobile but I have not discovered how this can be managed.  So from my perspective this only works for PCs and if you don't have a PC then other options need to be provided.

I'd be interested to hear what other users think on the issue and perhaps we can talk about it at our February Zoom meeting before any changes are made.

Regards

Alan