'Save Document As' for pfx file

'Save Document As' for pfx file

avatar

Hello,

We store certificates in RdM (entry type is file i suppose). In 'More' allow export is checked. Myself as administrator I am able to do 'Save Document As'. However non - administrators cannot do this.

They can double click it, which will ask to install the certificate locally (meaning the user has rights to open it).
As a temp workaround we stored is as ZIP file which he can open (also not 'Save Document As') and then extract the pfx-file from it.

Am i missing some security setting? Or is this just a bug?

All Comments (5)

avatar

Hello,

I would like to know what your version of RDM is and what type of data source you use.

Also, what is the storage mode configured for your certificate entries?



Best regards,


Gabriel Degrandpré

avatar

Hello,

RdM version 2019.2.19.0 64 bit (normally i always try to use the latest version)
Storage mode? we use Azure SQL as a data source.

Printscreen of entry in attachment.

2020-02-14_17h13_12.png

avatar

Hello,

Thank you for the information!

When I asked for the "storage mode" you use, I was meaning to ask what option you have selected for the Mode parameter in your Certificate entry's properties. I'm sorry if I was unclear.

Best regards,


Gabriel Degrandpré

avatar

No problem :)

The mode is set to 'stored in database' (which is the default option).

avatar

Hello,

After some tests, I believe I have figured out which option might be missing on your end.

In order to export documents with a non-administrator user, I first had to use my administrator user to navigate to Administration > System Permissions > Vault and grant the Export permission to users.

That being said, this permission will allow your users to do more than saving documents. With this permission, they would also be able to use the Export features to save the entries present in their Navigation pane. I leave it up to you to decide if you prefer to keep using your workaround or if you would be okay with granting the Export permission to your users.

Best regards,


Gabriel Degrandpré