Security level for media
Questions:
- Why do I need permissions?
Description:
individual authorisations can be defined for users via the rights system stored in TYRIOS. Typically, it is specified that each user has the right to view or download media/images. This makes sense for most media. However, there are media for which a finer differentiation is necessary. This is where the security levels come in.
Media can be stored in TYRIOS in three different security levels. The security levels are stored for each individual file in the media administration. The selected security level is also visible directly in the media management in the item list.
Security level "public"
By default, all uploaded media are stored with the security level "public". The file can be recognised by a simple ID. It is easy to guess and consecutive. A user is therefore always able to guess the URL of a file and download it. This is not critical in most cases, as the image can be displayed and downloaded in the browser anyway.
"Private and shareable" security level
The "private and shareable" security level is provided so that the URL for a file cannot be guessed. This generates a random URL that can be used to display or download the file. If the user knows this URL, they can pass it on to friends and acquaintances, who then also have access to this file. This is useful in a social network, for example.
Security level "private"
If a user should only have access to a file for which they have been specifically authorised, the "private" security level must be set. In this case, a user can only view or download the file if he knows the URL and if he is authorised to view the image via the rights management integrated in TYRIOS. This is useful for chargeable products such as software, manuals, etc.