Currently, you can disable the export feature files but not for folders. Any basic user with read/file read permissions can export folder and all files in it, even if the files in the folder have export disabled. This allows anyone on the project to export any folder to any device, which is a huge security issue.
Micah Peterson
The problem is Export unmanaged option( Send to folder) that can not be disabled for any user with read/ file read or read/ file write permissions. My company using Citrix for contractors access and recommend to them to use Export managed option(locks file, changes can be re-imported; files and logs are still on server side) but they can still use unmanaged way and export all files( onto their devices).
There is no basic user in ProjectWise ( no copy out, no export, no print, no msg) but still to be able to open file as read-only( the same like when check out/in, only log of file to be left in default location after reading it).
Right now ProjectWise user with read permissions(no File Read) is useless, it is much better NO ACCESS settings to use, if someone can not read the file doesn't need to see it either.
I started this when I noticed that users in Group with read/File Read can not export file but can export managed-unmanaged all files from folder level included folder itself, which is totally not logical. Please see my attached word document with screenshots.
Thank you,
There is no security glitch regarding this issue.
Access Control is used to prevent documents from being COPIED OUT or EXPORTED.
Any document for which a user does not have File Read access cannot be COPIED OUT or EXPORTED.
When trying to do so, the user will receive a pop-up dialog telling them that they do not have the required privileges.
While the folders may be exported, if the user does not have File-Read privileges to the documents within it, the folder will be empty in its exported location.
The COPY OUT function is essentially just an export to a predetermined location. Any user with the ability to open a file from ProjectWise is required to export it from the server to their local working directory. Once copied out, a user can copy or move the local file anywhere if they so choose and disabling the Export>Send To function would only serve to make that task require more effort.
Thank you Micah!