Re: Controlling Copy/Paste/Print 2004-11-13 - By Philip Nelson
Not if they don't use Acrobat reader to view the pdf ;-) When I referred to security vs inconvienience, that what I meant. The adobe products will make it conconvienient for the average user to cut and paste. But since you can just download the pdf with another tool, and view with with another tool, you can't really prevent people from seeing the bytes in the document that way.
Make sense?
--- "Keith Barrows (StarPilot)" <starpilot@(protected)> wrote:
> But does it allow a rules based control of copy/paste? Everything else > seems right about this product. However, the end user is allowed a limited > copy/paste per document - controlled by server side settings for each > individual. > > - Keith > > -----Original Message----- > From: Philip Nelson [mailto:panmanphil@(protected)] > Sent: Saturday, November 13, 2004 10:11 AM > To: aspnet-architecture@(protected) > Subject: [aspnet-architecture] RE: Controlling Copy/Paste/Print > > > --- Pamela Reinskou <pam.webpyrfect@(protected)> wrote: > > > I understand your problem with PDF it really needs to be in a new > > instance of the browser. However this may be your problem all around. > > Basically unless you open a new window you have no control over it, so > > all the code in the world will not prevent the die hard from stealing > > if that is what they are after. > > Just cut me off if everybody already gets this ;-) > > If a pdf can be viewed in *any* browser window, it can be downloaded with > another tool that completely circumvents your browser based methods to > prevent save, cut and paste. If the bytes can get to any process the user > chooses, the user can do whatever they want with them, period. curl or wget > are really simple download tools. Gview can display pdfs. So if you want to > actually secure this content, you will need to control the client side code > that displays it. > > The tool I mentioned last worked something like this from what I could tell. > > client opens page. > activex object is loaded or user is directed to download page, the usual > drill the activex object opened a secured connection to the site to list > content user chooses a document to view the activex object opened a secure > connection to download the document bytes the activex object opened the > application that displayed the bytes to show me the document. > > Here is where the proprietary part came in. Whether word, excel or pdf, I > couldn't save the document, nor browse to the location the application > thought the temporary file was located. The document never "existed" in the > sense that it would with a browser that would have copied to a temp location > before viewing. pretty cool really. > > ===== > Philip - http://blogs.xcskiwinn.org/panmanphil > "There's a difference between righteous anger and just being crabby" - > Barbara > > Need SQL Advice? http://sqladvice.com > Need RegEx Advice? http://regexadvice.com Need XML Advice? > http://xmladvice.com > > > Need SQL Advice? http://sqladvice.com > Need RegEx Advice? http://regexadvice.com > Need XML Advice? http://xmladvice.com >
===== Philip - http://blogs.xcskiwinn.org/panmanphil "There's a difference between righteous anger and just being crabby" - Barbara
Need SQL Advice? http://sqladvice.com Need RegEx Advice? http://regexadvice.com Need XML Advice? http://xmladvice.com
|
|