Curtis Eidson
river guide
Posts:98
 |
| 09-01-2010 08:15 AM |
|
Hi-
I'm using DF Ver:3.40.1.0 and have tested this on multipe version of DNN. If I change the file security of the DynamicForms_Exports folder (using file manager) either uncheck all user view options or select deny, I am still able to download files from this directory if I type in the full url path website/portals/o/Dynamic-Forms_exports/filename.pdf (i've also tried from computers that have never even logged in to the DNN site and they can still access the files).
I thought the issue might be because the file/folder is not a DNN "secure folder" so I created a folder in the DNN "Secure File System" and see the lock icon, set my security but I am still able to access these files without being logged in (I had to manually copy the export file to the secure folder location to test due to another issue below)
I then set Module config > view results options > Alternate Export Directory Folder to my new folder (tried: \DynamicForms_Exports\Exports), however, my pdf files are still created under the default \DynamicForms_Exports directory.
There might be a few things going wrong here but it would be great if someone could explain how this should actually work vs. how I'm expecting it to work. I checkked the latest user guide but it isn't yet current for 3.4 and these new options.
thanks,
Curtis |
|
|
|
|
Curtis Eidson
river guide
Posts:98
|
| 09-01-2010 09:18 AM |
|
I've tested a few more submissions and the Alternate Export Directory doesn't seem to work.
Also, This seems like it will break all emails that use the link token $(PDFLink:Create PDF) as the token doesn't appear to use this new export location (it still points to website.com/Portals/0/Dynamic-Forms_Exports/Create%20PDF_1516557c104e-6caa-445c-95c1-f9c105460b5c.pdf and not my new location of "\DynamicForms_Exports\Exports"
|
|
|
|
|
Curtis Eidson
river guide
Posts:98
|
| 09-13-2010 12:09 PM |
|
anyone ? |
|
|
|
|
Chad Nash
Posts:5260
|
| 09-13-2010 05:54 PM |
|
Hi Curtis - Sorry for the delay here.... Let me mention a few things here...
1. The Exports Folder I believe is only related to when you go to 'View Results' and click 'Export Results'. I believe this is limited to the exports of only the XLS files and no other direct files on the system such as PDF Completion Events. We will need to review this for the future as there are many areas that PDF's are used and referenced and we might want/need to create an alternate setting to allow for this. Additionally when this is implemented within view results exports its limited to the FULL export map path such as d:\yourdirectory. Either way though this is just used for Exporting Form Results and not PDF events (I just checked the source code).
2. This is probably an issue but just not something that has come up before I guess. Basically DNN doesn't do anything special with the files, if you check what happens in the physical file/folder path DNN actually renames the file to something like .resx at the end. It does this because ASP.NET will not render an .RESX file directly... What happens after that is if DNN see's you are signed in then it will actually rename the file and render it to an actual file instead of one that ends on RESX. I am not really sure the best way for DNN to handle something like this though... Would you still want to be able to attach the file to an email? If we do this I believe it would save the file as .resx instead of the .pdf but I don't know that we would be able to render it properly then for email attachments etc...
Thanks,
Chad
|
|
|
|
|
Cheryl
river guide
Posts:99
|
| 10-04-2010 12:16 PM |
|
Chad - I don't see where the files are being renamed to .RESX files...? Can I confirm though that you weren't expecting the link to a PDF completion event to enforce the login security of the site? That anyone who receives the email with the link to the PDF that was created by a form completion event would be able to follow that link to view the PDF, even if they weren't logged in on the site where it's stored? |
|
|
|
|
Chad Nash
Posts:5260
|
| 10-04-2010 01:23 PM |
|
Hi. Yes, renaming of the files is really just a feature of Admin/File Manager.
That is correct- by design (at least currently) Dynamic Forms would not need to force those users to sign in to access that file. This is why we use such as unique filename and so forth and I guess this really hasn't come up as a request before. The only difference would be if you added special folder IIS permissions to the folder but that is outside of DotNetNuke itself.
Thanks,
Chad
|
|
|
|
|