Images folder permissions to prevent deletion

For complex topics that regular users would not be interested in. For power users and database administrators.

Images folder permissions to prevent deletion

Postby asceticwonder » Mon Jan 29, 2018 8:33 pm

Hello world,

I dont want to save admin credentials on workstations for network share images folder.

I created standard user account to share images folder.

I want to grant read&execute and write permissions so case scenario of rogue employee does not delete files in images folder. (https://technet.microsoft.com/en-us/library/cc783530(v=ws.10).aspx#w2k3tr_randp_how_tfqi)

If I prevent workstations from deleting files in images folder via operating system permissions, will OD handle this gracefully when attempting to delete file within OD?

Thanks!

PS - Does anyone use autorev for similar case scenario?
asceticwonder
 
Posts: 9
Joined: Thu Oct 15, 2015 8:44 am

Re: Images folder permissions to prevent deletion

Postby jsalmon » Tue Jan 30, 2018 10:44 am

Open Dental will need the credentials in order to write to the images folder (creating statements, email attachments, sheet images, etc) so I guess you could run Open Dental as a specific user (that has permissions) and then remove the Open Dental permissions from user groups that should not be able to delete images within the program.
ImageDelete:
http://www.opendental.com/manual/permissions.html

That or you could try out the mode that not many users use and store images directly into the database (which will start to bloat your db size).
http://www.opendental.com/manual/imagesstoreindb.html
The best thing about a boolean is even if you are wrong, you are only off by a bit.

Jason Salmon
Open Dental Software
http://www.opendental.com
User avatar
jsalmon
 
Posts: 1464
Joined: Tue Nov 30, 2010 1:33 pm

Re: Images folder permissions to prevent deletion

Postby asceticwonder » Tue Jan 30, 2018 1:33 pm

Hmm... A lot of work to secure images folder from rogue employees.

I guess given the low cost of storage both local and cloud based, restricting ImageDelete from all users except for admin is not a terrible policy. And then you just need one Windows account with read&execute and write permissions.

My current dental management software lumps images into the database and sadly this has prevented easy incremental cloud-based backup of the DB. :(

Maybe sftp bypasses these concerns? An ftp server is installed on the same box where the mysql server resides?
asceticwonder
 
Posts: 9
Joined: Thu Oct 15, 2015 8:44 am

Re: Images folder permissions to prevent deletion

Postby jsalmon » Tue Jan 30, 2018 2:00 pm

asceticwonder wrote:Maybe sftp bypasses these concerns? An ftp server is installed on the same box where the mysql server resides?

Ahhh yes! I keep forgetting that we implemented SSH File Transfer Protocol (SFTP) as an option.
http://www.opendental.com/manual/paths.html
The best thing about a boolean is even if you are wrong, you are only off by a bit.

Jason Salmon
Open Dental Software
http://www.opendental.com
User avatar
jsalmon
 
Posts: 1464
Joined: Tue Nov 30, 2010 1:33 pm


Return to Advanced Topics

Who is online

Users browsing this forum: No registered users and 1 guest

cron