Try the fastest and simplest way to install ONLYOFFICE

Document Server Security

Integration questions/issues

Document Server Security

Postby ckinsey » Wed Aug 19, 2015 9:15 pm

I am using the OnlyOffice Document Server only (not community).

How can I provide security for documents uploaded to that server? I thought I might be able to take advantage of the vkey value in the API config, but it doesn't seem to get passed back to my server. There is nothing to stop someone from download other users' files if they can get the document's key.
ckinsey
 
Posts: 5
Joined: Wed Aug 19, 2015 9:10 pm

Re: Document Server Security

Postby AnaMih » Fri Aug 21, 2015 4:19 pm

In the current version if someone has the key of another document, he can access to it.
This issue will be fixed soon, we are currently working on the solution.
User avatar
AnaMih
 
Posts: 264
Joined: Mon Aug 25, 2014 10:15 am

Re: Document Server Security

Postby ckinsey » Fri Jan 27, 2017 11:56 pm

Was there ever an update to address this issue?
ckinsey
 
Posts: 5
Joined: Wed Aug 19, 2015 9:10 pm

Re: Document Server Security

Postby Maxim » Wed Feb 15, 2017 6:58 am

Hello ckinsey!
Was there ever an update to address this issue?

We have implemented into the OnlyOffice (this feature is used in Document Server starting with version 4.2) JSON Web Tokens standard that provides security for documents. Now this Standard protects users against unauthorized access to their documents.
Maxim
 
Posts: 381
Joined: Tue Oct 11, 2016 2:34 pm


Return to API

Who is online

Users browsing this forum: No registered users and 1 guest