Re: Controlling Copy/Paste/Print 2004-11-13 - By Keith Barrows (StarPilot)
But does it allow a rules based control of copy/paste? Everything else
seems right about this product. However, the end user is allowed a limited
copy/paste per document - controlled by server side settings for each
individual.
- Keith
-----Original Message-----
From: Philip Nelson [mailto:panmanphil@(protected)]
Sent: Saturday, November 13, 2004 10:11 AM
To: aspnet-architecture@(protected)
Subject: [aspnet-architecture] RE: Controlling Copy/Paste/Print
--- Pamela Reinskou <pam.webpyrfect@(protected)> wrote:
> I understand your problem with PDF it really needs to be in a new
> instance of the browser. However this may be your problem all around.
> Basically unless you open a new window you have no control over it, so
> all the code in the world will not prevent the die hard from stealing
> if that is what they are after.
Just cut me off if everybody already gets this ;-)
If a pdf can be viewed in *any* browser window, it can be downloaded with
another tool that completely circumvents your browser based methods to
prevent save, cut and paste. If the bytes can get to any process the user
chooses, the user can do whatever they want with them, period. curl or wget
are really simple download tools. Gview can display pdfs. So if you want to
actually secure this content, you will need to control the client side code
that displays it.
The tool I mentioned last worked something like this from what I could tell.
client opens page.
activex object is loaded or user is directed to download page, the usual
drill the activex object opened a secured connection to the site to list
content user chooses a document to view the activex object opened a secure
connection to download the document bytes the activex object opened the
application that displayed the bytes to show me the document.
Here is where the proprietary part came in. Whether word, excel or pdf, I
couldn't save the document, nor browse to the location the application
thought the temporary file was located. The document never "existed" in the
sense that it would with a browser that would have copied to a temp location
before viewing. pretty cool really.
=====
Philip - http://blogs.xcskiwinn.org/panmanphil
"There's a difference between righteous anger and just being crabby" -
Barbara
Need SQL Advice? http://sqladvice.com
Need RegEx Advice? http://regexadvice.com Need XML Advice?
http://xmladvice.com
Need SQL Advice? http://sqladvice.com
Need RegEx Advice? http://regexadvice.com
Need XML Advice? http://xmladvice.com
|
|
