Page 1 of 1

Images folder permissions to prevent deletion

Posted: Mon Jan 29, 2018 7:33 pm
by asceticwonder
Hello world,

I dont want to save admin credentials on workstations for network share images folder.

I created standard user account to share images folder.

I want to grant read&execute and write permissions so case scenario of rogue employee does not delete files in images folder. (https://technet.microsoft.com/en-us/lib ... p_how_tfqi)

If I prevent workstations from deleting files in images folder via operating system permissions, will OD handle this gracefully when attempting to delete file within OD?

Thanks!

PS - Does anyone use autorev for similar case scenario?

Re: Images folder permissions to prevent deletion

Posted: Tue Jan 30, 2018 9:44 am
by jsalmon
Open Dental will need the credentials in order to write to the images folder (creating statements, email attachments, sheet images, etc) so I guess you could run Open Dental as a specific user (that has permissions) and then remove the Open Dental permissions from user groups that should not be able to delete images within the program.
ImageDelete:
http://www.opendental.com/manual/permissions.html

That or you could try out the mode that not many users use and store images directly into the database (which will start to bloat your db size).
http://www.opendental.com/manual/imagesstoreindb.html

Re: Images folder permissions to prevent deletion

Posted: Tue Jan 30, 2018 12:33 pm
by asceticwonder
Hmm... A lot of work to secure images folder from rogue employees.

I guess given the low cost of storage both local and cloud based, restricting ImageDelete from all users except for admin is not a terrible policy. And then you just need one Windows account with read&execute and write permissions.

My current dental management software lumps images into the database and sadly this has prevented easy incremental cloud-based backup of the DB. :(

Maybe sftp bypasses these concerns? An ftp server is installed on the same box where the mysql server resides?

Re: Images folder permissions to prevent deletion

Posted: Tue Jan 30, 2018 1:00 pm
by jsalmon
asceticwonder wrote:Maybe sftp bypasses these concerns? An ftp server is installed on the same box where the mysql server resides?
Ahhh yes! I keep forgetting that we implemented SSH File Transfer Protocol (SFTP) as an option.
http://www.opendental.com/manual/paths.html