Hi Matthias,

In the Google-Doc-Viewer example, the PDF has to be accessible to Google's servers, for them to transform it into web content.

I suppose you could set up some customizations, that only allowed GET requests to bitstreams from Google's IP address, or to something that matched their UserAgent.

Or since you mentioned that primarily, this should just be to make it more difficult to download the full PDF, and to instead encourage the user to ONLY use the web-viewer. In that case, I would edit the Item View page, to remove the link to download. (If the user happened to know how to construct the path to the document, they could access it). And then make the document-viewer enabled and show up automatically by default.


Peter Dietz


On Fri, Sep 20, 2013 at 3:46 AM, Matthias Zipp <zipp@basis5.de> wrote:
Thank you Mark,

of course we are not dealing with top-secret documents, we want to increase the effort to download documents. It should be more difficult than a right mouse click. Finally it is maybe the most common way, to manage this with user rights. It is always about the dilemma to show content on one hand and protect it on the other hand.

Thank you very much for your assessment.

Best.
Matthias.

Am 18.09.13 16:18, schrieb Mark H. Wood:
On Wed, Sep 18, 2013 at 03:20:14PM +0200, Matthias Zipp wrote:
we are using DSpace 1.7 with XMLUI

We want to integrate online viewer functionality into our DSpace System 
mainly for pdf documents. I know the articles provided in the wiki
[
https://wiki.duraspace.org/display/DSPACE/Document+Viewer+Integration
https://wiki.duraspace.org/display/DSPACE/Document+Preview+with+Google+Docs+viewer
]

The prior intention to use the viewer is to protect the documents from 
downloading. Most of the viewer has the opposite intention - to share 
documents.

Has anybody an idea, how to protect for instance pdf from downloading 
within the DSpace presentation.
Unless you implement a secret custom protocol available only in some
closed-source viewer, I don't see any way to do that.  The server has
no way of knowing what kind of software sent an HTTP GET.  The client
is supposed to say what it is, but most of them can easily be adjusted
to lie.

Even a custom protocol is not really secure, because the user can see
all of the packets on the wire and has the executable code to examine.

It depends on what you mean by "protect".  What is your secret worth
to your opponent?  How much is it worth to you?  You can make it
difficult and costly to save a copy, but not impossible.  If you're
dealing in life-or-death secrets, have the user come to you and view
the material under guard.  If not...insurance and a vigilant legal
department might be more efficient than technology.



------------------------------------------------------------------------------
LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99!
1,500+ hours of tutorials including VisualStudio 2012, Windows 8, SharePoint
2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack includes
Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13. 
http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.clktrk


_______________________________________________
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette

-- 

_______________________________

dipl.-ing. matthias zipp
basis5 webtechnologie
möller und zipp ingenieure
und partner

pestalozzistraße 9
34119 kassel
germany

t +49.(0)561.7660348
f +49.(0)561.7660358

zipp@basis5.de
www.basis5.de
____________

vertretungsberechtigte gesellschafter: 
lars möller, matthias zipp
registergericht: amtsgericht frankfurt am main 
registernummer: PR 1118
umsatzsteuer-identifikationsnummer gemäß § 27 a umsatzsteuergesetz:
DE 219095185 
_______________________________

------------------------------------------------------------------------------
LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99!
1,500+ hours of tutorials including VisualStudio 2012, Windows 8, SharePoint
2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack includes
Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13.
http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.clktrk
_______________________________________________
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette