Documents without guest permissions are downloadable
How To articles are not official guidelines or officially supported documentation. They are community-contributed content and may not always reflect the latest updates to Liferay DXP. We welcome your feedback to improve How To articles!
While we make every effort to ensure this Knowledge Base is accurate, it may not always reflect the most recent updates or official guidelines.We appreciate your understanding and encourage you to reach out with any feedback or concerns.
Legacy Article
You are viewing an article from our legacy "FastTrack"
publication program, made available for informational purposes. Articles
in this program were published without a requirement for independent
editing or verification and are provided"as is" without
guarantee.
Before using any information from this article, independently verify its
suitability for your situation and project.
Issue
-
The document is stored in the browser cache and can be downloaded again without the user being logged in
-
Steps to reproduce:
1. Upload a text file document
2. Change permission, revoke guest view
3. Click on the resource in the document library and download the text file
4. Right-click on the download button, and then "copy link address".
5. Log out
6. Send the download Url to the browser, the download happens
Observed Behavior: The resource is downloaded from the browser cache even for guest users
Expected Behavior: The resource should not be stored in the browser cache.
Environment
- Liferay DXP [all versions]
Resolution
- The observed behavior is the expected behavior of the DXP.
- This behavior couldn't be avoided once a file was cached, it's on the client's side (we could not remove it from the user system either).
- To avoid cache files, users could use the cache control in system settings or set a time limit.
Did this article resolve your issue ?
