Hi Matthias,
In the Google-Doc-Viewer example, the PDF has to be accessible to Google's
servers, for them to transform it into web content.
I suppose you could set up some customizations, that only allowed GET
requests to bitstreams from Google's IP address, or to something that
matched their UserAgent.
Or since you mentioned that primarily, this should just be to make it more
difficult to download the full PDF, and to instead encourage the user to
ONLY use the web-viewer. In that case, I would edit the Item View page, to
remove the link to download. (If the user happened to know how to construct
the path to the document, they could access it). And then make the
document-viewer enabled and show up automatically by default.
Peter Dietz
On Fri, Sep 20, 2013 at 3:46 AM, Matthias Zipp <[email protected]> wrote:
> Thank you Mark,
>
> of course we are not dealing with top-secret documents, we want to
> increase the effort to download documents. It should be more difficult than
> a right mouse click. Finally it is maybe the most common way, to manage
> this with user rights. It is always about the dilemma to show content on
> one hand and protect it on the other hand.
>
> Thank you very much for your assessment.
>
> Best.
> Matthias.
>
> Am 18.09.13 16:18, schrieb Mark H. Wood:
>
> On Wed, Sep 18, 2013 at 03:20:14PM +0200, Matthias Zipp wrote:
>
> we are using DSpace 1.7 with XMLUI
>
> We want to integrate online viewer functionality into our DSpace System
> mainly for pdf documents. I know the articles provided in the wiki
> [https://wiki.duraspace.org/display/DSPACE/Document+Viewer+Integrationhttps://wiki.duraspace.org/display/DSPACE/Document+Preview+with+Google+Docs+viewer
> ]
>
> The prior intention to use the viewer is to protect the documents from
> downloading. Most of the viewer has the opposite intention - to share
> documents.
>
> Has anybody an idea, how to protect for instance pdf from downloading
> within the DSpace presentation.
>
> Unless you implement a secret custom protocol available only in some
> closed-source viewer, I don't see any way to do that. The server has
> no way of knowing what kind of software sent an HTTP GET. The client
> is supposed to say what it is, but most of them can easily be adjusted
> to lie.
>
> Even a custom protocol is not really secure, because the user can see
> all of the packets on the wire and has the executable code to examine.
>
> It depends on what you mean by "protect". What is your secret worth
> to your opponent? How much is it worth to you? You can make it
> difficult and costly to save a copy, but not impossible. If you're
> dealing in life-or-death secrets, have the user come to you and view
> the material under guard. If not...insurance and a vigilant legal
> department might be more efficient than technology.
>
>
>
>
> ------------------------------------------------------------------------------
> LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99!
> 1,500+ hours of tutorials including VisualStudio 2012, Windows 8, SharePoint
> 2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack includes
> Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13.
> http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.clktrk
>
>
>
> _______________________________________________
> DSpace-tech mailing
> [email protected]https://lists.sourceforge.net/lists/listinfo/dspace-tech
> List Etiquette:
> https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette
>
>
> --
>
> _______________________________
>
> dipl.-ing. matthias zipp
> basis5 webtechnologie
> möller und zipp ingenieure
> und partner
>
> pestalozzistraße 9
> 34119 kassel
> germany
>
> t +49.(0)561.7660348
> f +49.(0)561.7660358
> [email protected]
> ____________
>
> vertretungsberechtigte gesellschafter:
> lars möller, matthias zipp
> registergericht: amtsgericht frankfurt am main
> registernummer: PR 1118
> umsatzsteuer-identifikationsnummer gemäß § 27 a umsatzsteuergesetz:
> DE 219095185
> _______________________________
>
>
>
> ------------------------------------------------------------------------------
> LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99!
> 1,500+ hours of tutorials including VisualStudio 2012, Windows 8,
> SharePoint
> 2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack
> includes
> Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13.
> http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.clktrk
> _______________________________________________
> DSpace-tech mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/dspace-tech
> List Etiquette:
> https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette
>
------------------------------------------------------------------------------
LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99!
1,500+ hours of tutorials including VisualStudio 2012, Windows 8, SharePoint
2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack includes
Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13.
http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.clktrk
_______________________________________________
DSpace-tech mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspace-tech
List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette
