Mar 09 2020 08:39 AM
Mar 09 2020 08:39 AM
I have selected the view only permission level in SharePoint. This allows me to restrict downloads for MS office documents only. However, I want to be able to restrict download and print of PDF files.
Is there a way to do this or is it a limitation?
Mar 09 2020 09:24 AM
Hi, this is a known issue/limitation:
"Any document that has a server-side file handler can be viewed in the browser but not downloaded. File types that do not have a server-side file handler (cannot be opened in the browser), such as video files, .pdf files, and .png files, can still be downloaded."
So it is working the way it is intended, unfortunately.
Mar 09 2020 09:31 AM
Mar 09 2020 11:24 AM
Mar 09 2020 04:12 PM
As per my expierence, yes you can restrict the files download on SharePoint Online, by gaving view only permission, which prevent end user from downloading files on Sharepoint.
View Only permission include view pages, items, and documents. Any document that has a server-side file handler can be viewed in the browser but not downloaded. File types that do not have a server-side file handler (cannot be opened in the browser), such as video files, .pdf files, and .png files, can still be downloaded. for more Info, please refer to following article https://docs.microsoft.com/en-us/sharepoint/understanding-permission-levels
unfortunately, his Option is available only on the Sharepoint root site, which means you can assign this permission level to the members on the root site, then inherit the permission.
But as i saw, you want to restrict PDFs only, which can be achieved also using IRM SharePoint Policy.
IRM stand for Information Rights Management, and can use to restrict Office apps ex. prevent files from printing, Outlook ex. to prevent and protect specific emails from being forward for also Exchange Online and Sharepoint.
Set up Information Rights Management (IRM) in SharePoint admin center:
Apply Information Rights Management (IRM) to a list or library
please let me know if i could help you :)
Mar 09 2020 08:50 PM
Thank you for your reply. I have tried out what you've mentioned already. When I enable IRM, I'm unable to view the PDF file in the browser. I get a message saying that no preview is available. Though the download and print is restricted, my main purpose is to be able to still view the PDF file and that isn't happening.
Please let me know if you know about this.
Mar 10 2020 04:32 PM
Have you tried to restrict downloading the office files like excel, or word using the IRM, if not please check and provide me your feedback.
You mentioned also that you are not able to view the PDF in the browser, which is your main purpose, could you check if you can download the PDF file or not ?
could you try using another PDF ?
please provide me screenshot from the affected PDF which cannot be opend in the browser
Mar 10 2020 10:34 PM
I've managed to restrict download and print for MS office files like word, excel and powerpoint using view only permission and IRM.
My main purpose is that a person under a group with view only permissions should be able to view the PDF file in the browser, but not download or print the file.
I noticed that upon doing this the PDF file says it is protected and cannot be downloaded by another user with view only permissions.
Mar 14 2020 08:15 AM - edited Mar 14 2020 08:17 AM
Thanks for your reply..
Normally if you used view only permission you will restrict the group members who have view only permission from downloading the files, so theres no need to use both view only permission and IRm policy.
please cearte another test SharePoint site who has no view only permission and apply the IRM policy and check if you can open the file or not (try to use edit permission)
as per your screenshot, theres's blue hyper link Download combatible reader, what will happen if you clicked on it ?
what would happend if you opened a restricted work file (same screenshot ) or ?
Jan 22 2021 06:25 AM
When we apply the view only permission to PDF files, we are not able to download the files using Edge and Chrome because with those browsers, the PDF files open in the browser by default.
So this seems to be a solution to disable the download for PDFs.
Do you know if with other browsers or extensions, this behaviour can be different?
Apr 30 2021 09:59 AM - edited Apr 30 2021 10:00 AM
Neither View Only, Restricted View, or a Custom View will prevent a user from downloading things like PDFs, PNG, video files, and etc.
This is the issue most of us posting are having but the same responses regarding View Only keep coming up. Hitting the three dots will always show the "download" link no matter what. View only does NOT work.
What I really want to understand, are answers such as this: "Any document that has a server-side file handler can be viewed in the browser but not downloaded. File types that do not have a server-side file handler (such as pdf files, video files, png files, etc.) can still be downloaded."
I am not sure what this means since you can clearly preview a pdf entirely within SharePoint. How is that not a server side file handler? Why can't SharePoint simply restrict access to "Preview Only"?
May 04 2021 12:09 PM
@EneaAntonicelli I don't get the download option with 'Restricted view'. You can see it yourself:
May 04 2021 12:32 PM
@KM KTNN I do but it makes no difference. It's rubbish. It does not work as intended. The restricted view wont even let users access the library. This whole application is garbage to be honest. How long has this been around without Microsoft addressing basic issues. The movement of folders for example. It is absolute hell. Whether you do it in modern view, or in file explorer, you either cannot access parent directories, or files just vanish without the system generating a debuggable error. Microsoft is useless when it comes to questions such as this. It's infuriating.
May 04 2021 01:38 PM - edited May 04 2021 01:39 PM
You could create a new permission level 'Restricted Read' (View Items, Open Items, View Pages, Open) and apply it at the site level so users can access the library. Then apply 'Restricted View' (or 'View Only') per library or per folder. Not fun but it seems to work.
May 04 2021 01:48 PM - edited May 04 2021 01:48 PM
Already tried. it does not work. I am not sure if the people that give these suggestions out in the forums above (not you, the links) actually test their advice. I created a custom permission level and spent 3 hours individually trying different combinations of permissions. Again, microsoft stated this is a known issue due to the fact that PDFs and other files have no server-side file handlers. There is no way to do this and actually limit downloading. You can limit downloading for word files all day. but not for what I need which is PDFs. Thank you for your suggestions however.