I have a community and internal links to attachments. They end with ...servlet/servlet.FileDownload?file={ID} When the user clicks the link, a window.open(fileUrl) is called. This prompts to download. However if a user copy / pastes the link in an email and sends it to someone else, authenticated or not, the recipient is allowed to also download the file. This is obviously a problem. How can we prevent unauthenticated users who have a link from access? I thought they would be redirected to community login page. How can I mitigate this? It appears the communities security isn't configured correctly.

  • 2
    Notes and Attachments inherit permissions of the parent object, I would start there. – identigral Jun 25 '19 at 20:23
  • ok I am pretty new to Salesforce. There is a custom object my_object__c, and this is an attachment. What permission do I set to only allow Salesforce users and Authenticated Community Users to download it? That would be very helpful. Thanks. – Hcabnettek Jun 26 '19 at 21:10
  • There are a lot of ways you could tackle this. What have you tried to solve this problem so far? – identigral Jun 26 '19 at 21:48
  • I tried posting on here for help. So far no luck – Hcabnettek Jun 26 '19 at 21:51
  • Give this Trailhead a shot: trailhead.salesforce.com/en/content/learn/modules/data_security/… – identigral Jun 26 '19 at 22:01

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.