aC forum: File attachments viewed with API token.

Post #5 by JK Design

JK Design — Wed, 30 Sep 2009 20:24:29 CEST

I just sent a support request, asking for this specific feature.

In addition, tickets/documents/etc that are emailed to team members/subscribers, should have the option not to be truncated at all, so a recipient that was added as a subscribe (even though they do not login to ActiveCollab) can view the entire conversation and reply to it, without having to login. And as long as they "reply all" their reply will go back into activecollab. But the issue is their original msg sent to them may have been truncated.

Post #4 by chrismal

chrismal — Fri, 12 Jun 2009 09:15:31 CEST

+1 to enable download without authentication or to send as an attachment to the email.

My major client has trouble logging into the system and downloading the files. They forward the tickets to many different people in their business who are not on AC and then can't download the files. We have had to revert using email to support them.

Post #3 by Ilija Studen

Ilija Studen — Mon, 01 Jun 2009 10:24:31 CEST

Token is your system password - if someone has your token, he can log in and do pretty much anything you can do. This is the one of the reasons why API is in read-only mode by default.

Because of that, sharing tokens with other people is not recommended. We understand the convenience of single click download, but in such case activeCollab permission system is not involved and we find it to be unacceptable, at least by default.

You are free to create your own module that enables downloads without authentication.

Post #2 by Matt Robenolt

Matt Robenolt — Mon, 01 Jun 2009 02:32:25 CEST

Actually, I take back half of my request. If I manually append my token to the end of the URL, it works without needing to be logged in. So I guess then I think for the convenience, all of the file attachment links should just have your token appended automatically so if you wanted to copy the link to someone, you can. Or even provide a "public" link to use. Just something so I wouldn't need to append it manually.

Then in emails kicked out, that person's token should always be appended.

Post #1 by Matt Robenolt

Matt Robenolt — Mon, 01 Jun 2009 02:27:00 CEST

The main reasoning is for the emails that are kicked out by aC. I'd like to be able to see the list of attachments that are associated with that comment, and just click the link to download. So it could then easily spit out a link that looks like: http://mysite.com/attachments/3076?disposition=attachment&project_id=34&token=33-jsdahfhadshfdsafde

It should just append that user's token so they don't need to actually log in to activeCollab to download the file or view an image.

I think this would just be a little convenience factor. If then I wanted to share a link to someone outside of aC, I could just give them a link with my token, so they wouldn't NEED to have an aC account. Maybe I wanted to show off a site mock up to a fellow colleague just for feedback. Right now, I have to grab the file, and upload it again to somewhere public. Same with any file. Sometimes I'd like to be able to share it without necessarily moving it to a new location.