Skip to main content
7-Bedrock
September 14, 2017
Solved

Event available for File-Download via Link?

  • September 14, 2017
  • 4 replies
  • 2382 views

Is there an TWX-event that is fired when a logged-in-user tries to download any file via link (successful or not) ?


Background:
If there would be a event that is fired everytime a user tries to download any file via link (e.g. http://localhost/Thingworx/FileRepositories/TrainingRepository/CHROME.exe) one could prevent (via monitoring this event)

1. BRUTE FORCE/Guess access and download of Files, which are not intend for the particular user to be downloaded

(e.g. if user knows http://localhost/Thingworx/FileRepositories/TrainingRepository and tries 500 attempts / sec to get files within this folder like ../TrainingRepository/a.a , TrainingRepository/aa.a .... TrainingRepository/zzzz.z)


2. Access Control to Files for which the user knows the name/path of the repository to download from

Regards

Patrick

Best answer by CarlesColl

Simple answer: Not.

You may digg into Tomcat logs to see HTTP requests via a Java extension and extract FileRepository petitions.

4 replies

22-Sapphire I
September 14, 2017

To secure your files and not allow illegal download, you can use Organizations and visibility.

to monitor actual downloads, you can use button driven downloads vs. letting them click the link, (button triggers the download url)

1-Visitor
September 14, 2017

Simple answer: Not.

You may digg into Tomcat logs to see HTTP requests via a Java extension and extract FileRepository petitions.

pbrünner7-BedrockAuthor
7-Bedrock
September 15, 2017

Okay thank you for your answer(s).
Carles Coll`s reply answers my core question.

Perhaps it would be a good feature in future to have events fired for downloading via (direct-browser-)link whilest user is logged in.

best thanks

Patrick

1-Visitor
September 15, 2017

Yes both events, on download and on upload would be great.