Images folder permissions to prevent deletion

For complex topics that regular users would not be interested in. For power users and database administrators.
Post Reply
asceticwonder
Posts: 19
Joined: Thu Oct 15, 2015 8:44 am

Images folder permissions to prevent deletion

Post by asceticwonder » Mon Jan 29, 2018 7:33 pm

Hello world,

I dont want to save admin credentials on workstations for network share images folder.

I created standard user account to share images folder.

I want to grant read&execute and write permissions so case scenario of rogue employee does not delete files in images folder. (https://technet.microsoft.com/en-us/lib ... p_how_tfqi)

If I prevent workstations from deleting files in images folder via operating system permissions, will OD handle this gracefully when attempting to delete file within OD?

Thanks!

PS - Does anyone use autorev for similar case scenario?

User avatar
jsalmon
Posts: 1551
Joined: Tue Nov 30, 2010 12:33 pm
Contact:

Re: Images folder permissions to prevent deletion

Post by jsalmon » Tue Jan 30, 2018 9:44 am

Open Dental will need the credentials in order to write to the images folder (creating statements, email attachments, sheet images, etc) so I guess you could run Open Dental as a specific user (that has permissions) and then remove the Open Dental permissions from user groups that should not be able to delete images within the program.
ImageDelete:
http://www.opendental.com/manual/permissions.html

That or you could try out the mode that not many users use and store images directly into the database (which will start to bloat your db size).
http://www.opendental.com/manual/imagesstoreindb.html
The best thing about a boolean is even if you are wrong, you are only off by a bit.

Jason Salmon
Open Dental Software
http://www.opendental.com

asceticwonder
Posts: 19
Joined: Thu Oct 15, 2015 8:44 am

Re: Images folder permissions to prevent deletion

Post by asceticwonder » Tue Jan 30, 2018 12:33 pm

Hmm... A lot of work to secure images folder from rogue employees.

I guess given the low cost of storage both local and cloud based, restricting ImageDelete from all users except for admin is not a terrible policy. And then you just need one Windows account with read&execute and write permissions.

My current dental management software lumps images into the database and sadly this has prevented easy incremental cloud-based backup of the DB. :(

Maybe sftp bypasses these concerns? An ftp server is installed on the same box where the mysql server resides?

User avatar
jsalmon
Posts: 1551
Joined: Tue Nov 30, 2010 12:33 pm
Contact:

Re: Images folder permissions to prevent deletion

Post by jsalmon » Tue Jan 30, 2018 1:00 pm

asceticwonder wrote:Maybe sftp bypasses these concerns? An ftp server is installed on the same box where the mysql server resides?
Ahhh yes! I keep forgetting that we implemented SSH File Transfer Protocol (SFTP) as an option.
http://www.opendental.com/manual/paths.html
The best thing about a boolean is even if you are wrong, you are only off by a bit.

Jason Salmon
Open Dental Software
http://www.opendental.com

Post Reply