How difficult would it be to allow a user to generate a one time use temporary account that had rights to download a specific file. This is a functionality I am looking for.
I don't think it would be that much work, we could have a special download user, and when the download link is generated a valid session ID is created, and when that special users is used to download the file, the session is removed after download is completed.
Few hours of work at most.
B0zz
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I would like to use this as a method for user's to send documents securely. I would like to expose this site via and SSL login and use it for the non-profit mental health clinic where I work. Would this solution enable us to send to more then one person at a time in a manner that each user can only access the document that was associated with the login sent to them?
Are you interested in implementing this?
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Would a user be able to guess at a one time session number? If the numbers are not consecutive and expire when used this should be pretty secure.
I think this will make OWL a great option for people looking to securely transfer files outside of email.
Could you include a way for someone to automatically alert an email account that there is a download for them? I've always been told that login information should be separate from the site so his could either send two emails timed apart, or just the site and the sender can follow up with the session number.
Do you need anything from me? I don't currently have an OWL installation running, but I have been monitoring the project. I can set one up if you would like me to do some testing.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
OK, I will continue to monitor this project. Thanks for the input.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Anonymous
-
2007-08-12
Logged In: YES
user_id=1613613
Originator: NO
Can u describe that in some detail?
From what I understand, you can create a group, a folder and a user for this purpose. Keep the folder empty and the user disabled. When u decide, that the user needs a certain file, add it to this folder, enable the user with a new password of your choice; and then disable after use.
I agree this is too manual a method. Your input could help me understand what exactly u r looking for.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I think what they are looking for is a ONE Time download link that allows one to send a link to an Owl File that will ONLY allow him to download it ONCE.
B0zz
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Logged In: YES
user_id=55225
Originator: NO
I don't think it would be that much work, we could have a special download user, and when the download link is generated a valid session ID is created, and when that special users is used to download the file, the session is removed after download is completed.
Few hours of work at most.
B0zz
Logged In: YES
user_id=582183
Originator: YES
I would like to use this as a method for user's to send documents securely. I would like to expose this site via and SSL login and use it for the non-profit mental health clinic where I work. Would this solution enable us to send to more then one person at a time in a manner that each user can only access the document that was associated with the login sent to them?
Are you interested in implementing this?
Logged In: YES
user_id=55225
Originator: NO
What I'm thinking is this:
https://your.site.com/owl/download.php?sess=<some one time session>.
The onetime session is associated with a fileID. so the user can only download that file and not sign on to the owl portal.
we would also create a user called download, that would serve for this purpose and this purpose only.
Let me know what you think.
Yes I'm interested in implementing this.
Regards,
B0zz
Regards
Logged In: YES
user_id=582183
Originator: YES
Would a user be able to guess at a one time session number? If the numbers are not consecutive and expire when used this should be pretty secure.
I think this will make OWL a great option for people looking to securely transfer files outside of email.
Could you include a way for someone to automatically alert an email account that there is a download for them? I've always been told that login information should be separate from the site so his could either send two emails timed apart, or just the site and the sender can follow up with the session number.
Do you need anything from me? I don't currently have an OWL installation running, but I have been monitoring the project. I can set one up if you would like me to do some testing.
Logged In: YES
user_id=55225
Originator: NO
The session would be the Current Owl Session id in the form of: sess=02490698bf5561d2b7d792afb3d4d695
Not easily guessable.
For the email there is NO login required. Just a Link (URL) to download a file.
I don't plan on implementing this right now. I don't have much free time at the moment.
B0zz
Logged In: YES
user_id=582183
Originator: YES
OK, I will continue to monitor this project. Thanks for the input.
Logged In: YES
user_id=1613613
Originator: NO
Can u describe that in some detail?
From what I understand, you can create a group, a folder and a user for this purpose. Keep the folder empty and the user disabled. When u decide, that the user needs a certain file, add it to this folder, enable the user with a new password of your choice; and then disable after use.
I agree this is too manual a method. Your input could help me understand what exactly u r looking for.
Logged In: YES
user_id=55225
Originator: NO
I think what they are looking for is a ONE Time download link that allows one to send a link to an Owl File that will ONLY allow him to download it ONCE.
B0zz