Manage upload restrictions

Use the Upload pane of the Restrictions page to add, enable, disable, reorder, or delete upload restriction entries. Using upload restrictions, for each user class, you can allow or deny permission to upload files based on the destination and set the owner, group, or file system permission (mode) of the uploaded file on a UNIX-based system.

The following topics provide how-to instructions for managing upload restrictions:

Add an upload restriction

Use the following procedure to add an upload restriction.

  1. Select Access > Restrictions.
  2. Click the Upload tab.
  3. The Upload Restrictions pane is displayed.
  4. Click New Entry. A new line is displayed in the list.
  5. Complete the fields in the following table.
  6. Field Description
    Path

    The file name or directory you want to apply a restriction to. Specify the path relative to the file system root for the user. For a real user, the file system root is the operating system root. For a virtual user, the file system root is the user's home directory. On Windows, you must use a POSIX path. Specify drives as /drives/c and /drives/d instead of C:\ and D:\. You can use UNIX-style wildcard characters to apply restrictions for an entire directory and its subdirectories.

    Path entries must contain both a forward slash and the asterisk wildcard (/*) to deny or allow everything. Specifying /temp applies the restriction only to the directory itself, not its contents. To apply the restriction to the directory and its contents, you must specify /temp/*.

    For example, if you specify /drives/C/temp as the path and allow uploads, uploading will be allowed but Owner, Group, and Mode will not be applied to the uploaded file. To apply Owner, Group, and Mode or to allow uploads to subdirectories of /temp, you must specify /drives/C/temp/* as the path.

    With SecureTransport version 5.4, two new parameters are introduced with Filesystem restrictions: {s} and {i}. These two options are used as prefixes to regular expressions and their purpose is to match the Path in case sensitive ({s})or case insensitive ({i}) manner.

    • {i} matches Path in an expression in a case-insensitive fashion.
      Example use: Access to path that matches the expression {i}/*.xml will allow the user to upload any xml file, regardless of filename extension case: whether it is XML, xml or XmL.
    • {s} matches all files in an expression in a case-sensitive fashion.
      Example use: Access to path that matches the expression {s}/*.TXT will allow the user to upload only files with TXT extension (uppercase, as defined in the expression) and will not be able to upload files with .txt extension (lowercase, not defined in the expression).
    Along with the two regular expression prefixes, a dedicated configuration option is introduced: Restrictions.pathIgnoreCases. When it is set to false, all expressions that do not use the {i} or {s} prefixes will match the path in case-sensitive manner. Respectively, when set to true, all expressions without the {i} or {s} prefixes will match in case-insensitive manner.
    Allowed Select Yes or No based on whether you want to restrict uploading.
    User Class Select a user class. Asterisk (*) means all users.
    Owner

    (UNIX-based systems only) User ID to be set for the uploaded file when Allowed is Yes.

    When the Users.Uploads.RestrictionsApplication server configuration parameter is set to limited, the value of this field is ignored if the file mode is set by the client.

    The Users.Uploads.RestrictionsApplication server configuration parameter default value is: limited

    When the Users.Uploads.RestrictionsApplication server configuration parameter is set to full, the value of this field is always applied.

    Group

    (UNIX-based systems only) Group name or ID to be set for the uploaded file when Allowed is Yes.

    When the Users.Uploads.RestrictionsApplication server configuration parameter is set to limited, the value of this field is ignored if the file mode is set by the client.

    The Users.Uploads.RestrictionsApplication server configuration parameter default value is: limited

    When the Users.Uploads.RestrictionsApplication server configuration parameter is set to full, the value of this field is always applied.

    Mode

    (UNIX-based systems only) File access permissions to be applied to the uploaded file when Allowed is Yes.

    When the Users.Uploads.RestrictionsApplication server configuration parameter is set to limited, the value of this field is ignored if the file mode is set by the client.

    The Users.Uploads.RestrictionsApplication server configuration parameter default value is: limited

    When the Users.Uploads.RestrictionsApplication server configuration parameter is set to full, the value of this field is always applied.

    If you leave this field empty, the file mode set by the client is applied regardless of the value of Users.Uploads.RestrictionsApplication server configuration parameter.

  7. Click the Save icon (Save) in the Edit column.
  8. The status of a new entry is set to Disabled.
Note To cancel an add operation, select Access > Restrictions again.

Enable or disable an upload restriction

Use the following procedure enable or disable an upload restriction.

  1. Select Access > Restrictions.
  2. Click the Upload tab.
  3. The Upload Restrictions pane is displayed.
  4. Select the check box for each entry to modify.
  5. Click Enable or Disable.
  6. The icons in the Path column change to indicate the status of the classes.

Edit an upload restriction

Use the following procedure to edit an upload restriction.

  1. Select Access > Restrictions.
  2. Click the Upload tab.
  3. The Upload Restrictions pane is displayed.
  4. Click the Edit icon (Edit) in the Edit column for the entry to edit.
  5. Make the required changes in the fields.
  6. Click the Save icon (Save) in the Edit column.
Note To cancel an edit operation, select Access > Restrictions again.

Reorder upload restrictions

Use the following procedure to reorder upload restrictions.

  1. Select Access > Restrictions.
  2. Click the Upload tab.
  3. The Upload Restrictions pane is displayed.
  4. Click Reorder.
  5. Up and down arrows are displayed in a column before the Path column.
  6. Drag the rows of the entries to the required order.
  7. Click Save Order.
Note To cancel a reorder operation, select Access > Restrictions again.

Delete an upload restriction

Use the following procedure to delete an upload restriction.

  1. Select Access > Restrictions.
  2. Click the Upload tab.
  3. The Upload Restrictions pane is displayed.
  4. Select the check box for each entry to delete.
  5. Click Delete.
  6. Click OK in the confirmation dialog box.

Related Links