BlobServer Security
I'm currently looking for a solution where an authenticated portal
application pulls content directly from the WebCenter Sites repository
via a custom RestFul interface which will return fully rendered HTML
snippets, we can control access to SiteEntires that return the HTMLf ragments via custom ACLs but we are a stuck on how we can do the same
for the BlobServer. There are many sensitive documents stored in
WebCenter Sites, we want to protect against a scenario where a URL could
be manually constructed to retrieve these documents.
I'm aware of the BlobServer security flag but this seems to be all or nothing. The same Sites container also serves content for the public site where the public user has access browser access to documents. Is there any strategies we can implement to restrict access to the blob server on a per file basis based for a requesting user (the portal in this instance) session?
I'm aware of the BlobServer security flag but this seems to be all or nothing. The same Sites container also serves content for the public site where the public user has access browser access to documents. Is there any strategies we can implement to restrict access to the blob server on a per file basis based for a requesting user (the portal in this instance) session?
0