Project

General

Profile

Actions

Bug #7743

closed

[Workbench] Hide file preview buttons when preview isn't possible with current keep-web config

Added by Tom Clegg over 8 years ago. Updated about 1 year ago.

Status:
Closed
Priority:
Normal
Assigned To:
-
Category:
Workbench
Target version:
-
Story points:
1.0

Description

See CollectionsController#keep_web_url.

From #5824 note 25:

  • If keep_web_download_url is set, disposition=attachment links (i.e., downloads) are routed to the given URL (typically https://download.uuid_prefix.arvadosapi.com/c=%{uuid_or_pdh}). This is expected to match keep-web's -attachment-only-host argument.
  • If keep_web_download_url is set and keep_web_url is not set, preview is disabled and all preview/download links are routed to keep_web_download_url.
  • If both are set, but keep_web_url isn't a wildcard (one-vhost-per-collection) form and trust_all_content isn't true, showing inline content from a non-public non-shareable-link collection will result in a download instead of preview.
  • If keep_web_download_url is not set, and keep_web_url isn't a wildcard form, and trust_all_content isn't set, showing inline content from a non-public non-shareable-link collection will produce an error: with that configuration, we can't authenticate safely without creating XSS problems.

Don't render file preview buttons in cases 2-4.


Subtasks 1 (0 open1 closed)

Task #8126: ReviewClosedTom Clegg05/21/2015Actions

Related issues

Related to Arvados - Idea #5824: [Workbench] [Keep] collection browse/download serverResolvedTom Clegg05/21/2015Actions
Actions #1

Updated by Tom Clegg over 8 years ago

  • Subject changed from Hide preview button when preview isn't possible to [Workbench] Hide file preview buttons when preview isn't possible with current keep-web config
  • Description updated (diff)
  • Category set to Workbench
  • Assigned To deleted (Tom Clegg)
  • Parent task deleted (#5824)
Actions #2

Updated by Tom Clegg over 8 years ago

  • Tracker changed from Task to Bug
  • Target version changed from 2015-11-11 sprint to Arvados Future Sprints
Actions #3

Updated by Brett Smith over 8 years ago

  • Target version deleted (Arvados Future Sprints)
Actions #4

Updated by Brett Smith over 8 years ago

  • Target version set to Arvados Future Sprints
Actions #5

Updated by Brett Smith over 8 years ago

  • Description updated (diff)
Actions #6

Updated by Brett Smith over 8 years ago

  • Story points set to 1.0
Actions #7

Updated by Brett Smith about 8 years ago

  • Assigned To set to Radhika Chippada
  • Target version changed from Arvados Future Sprints to 2016-01-20 Sprint
Actions #8

Updated by Brett Smith about 8 years ago

  • Target version changed from 2016-01-20 Sprint to Arvados Future Sprints
Actions #9

Updated by Brett Smith about 8 years ago

  • Assigned To deleted (Radhika Chippada)
Actions #10

Updated by Brett Smith about 8 years ago

  • Description updated (diff)
Actions #11

Updated by Ward Vandewege over 2 years ago

  • Target version deleted (Arvados Future Sprints)
Actions #12

Updated by Peter Amstutz about 1 year ago

  • Status changed from New to Closed
Actions

Also available in: Atom PDF