Restricting a Group's Protocol Privileges
Access to data transmission protocols can be specified for each group, allowing you to specify exactly which protocols a group's members are allowed to use to connect to Files.com. This allows you to control exactly which methods a group can use to connect to your Files.com site which can assist you in meeting any security compliance regulations that apply to your business or industry.
Use the Protocol Access setting, within the group's Privileges settings, to allow or disallow the selected group's access to FTP (including FTPS and FTPES), SFTP, WebDAV, Web Portal, Desktop app, and the Files.com API.
Protocol Setting | API Attribute | Description |
---|---|---|
FTP | ftp_permission | Specifies whether members of the group are allowed to connect using the FTP, FTPS or FTPES protocol. |
SFTP | sftp_permission | Specifies whether members of the group are allowed to connect using SFTP protocol. |
WebDAV | dav_permission | Specifies whether members of the group are allowed to connect using WebDAV or WebDAVS protocol. |
Web, Desktop App, and API | restapi_permission | Specifies whether members of the group are allowed to connect using the Files.com web portal, the Desktop App, or via the REST APIs using the HTTPS protocol. |
User accounts with Administrator access privileges, cannot be denied access to the Web Portal, Desktop app, and the Files.com API but can be disallowed from having access to FTP (including FTPS and FTPES), SFTP, and WebDAV.
This setting works in conjunction with the IP Whitelist setting and the Access Control by Country setting.
Group Protocol Access vs User Protocol Access
By default, your site is configured so that protocol access can be assigned either through users or through groups - a user can connect with a protocol if it has been enabled for their user account or if they are a member of a group with the protocol enabled.
You can configure your site to manage all protocol access through groups. When you enable this setting, only users who are members of groups with a protocol enabled can use that protocol to connect. Protocol access for individual users is ignored, and only the group settings take effect.