Dec 15 2022 01:01 PM
Dec 15 2022 01:01 PM
We want to set the site-wide permissions on a SharePoint comms site to prevent most users from being able to download the videos (but to be able to watch them, of course).
The View Only permission that's built into SharePoint doesn't seem to work for video files (Office file types do work).
Surely there is a way to do this?
Jan 03 2023 01:25 PM
@Kevin Crossman - At a library or folder level you can use the "Restricted View" permission level in the classic SP permission UI to force block download + view only.
You will now have a Library where the Visitors can view and not download files including videos.
You can do the same thing at a folder.
This doesn't work at the Site level due to some issue with how SP Modern pages work where they don't operate with "Restricted View" permission. If you applied this at the Site level permissions users with "Restricted View" would get an access denied message navigating to the home page of the site or any site page. You might be able to overcome this by making your own custom Permission Level for the site that is a copy of "Read" but remove the permission level "List Permissions" > "Open Items". It seems from quick testing that works to block download of all files but lets Modern SP pages still work, but I haven't tested enough to know if it has some other side effects.
I know this isn't ideal having to do this in classic permissions UI. I'm working with ODSP on a plan to try and get view only + block download elevated for Sites/Libraries/Files so it's easier to do without having to dig into SP classic UI.
Jan 04 2023 01:39 PM
Jan 04 2023 04:21 PM
@Kevin Crossman - After creating a new SP site, can you add a file and share it? I think that forces "Restricted View" to get created. (Sorry this is so silly we need to find a way to fix this and make it easy).
For a custom permission level, what I tried and seemed to work in the few cases I tested, was to make a copy of "Read" and then just uncheck "List permissions > Open items" and I kept all the other permissions that Read had by default.
Jan 04 2023 04:48 PM