I've implemented a custom er.attachment.ERAttachmentRequestHandler.Delegate to restrict access to documents based on session infos...
But the ERAttachmentLink does not generate proxied url's with session id in it.
I've modified ERAttachmentProcessor.proxiedUrl to append the wosid if a session exists :
if (context.hasSession() && context.session().storesIDsInURLs())
attachmentUrl = attachmentUrl + "?wosid=" + context.session().sessionID();
Does that seems ok ?
Get latest updates about Open Source Projects, Conferences and News.