File attachments
Beginning in 12.1, the ability to attach files to objects in Optiva and publish those files is determined by these factors:
- The configuration of the
AttachmentModesetting in the<appSettings>section of the Web.config file. This file is located in the inetpub\wwwroot\FsSvcCore directory. - The configuration of DOCUMENT.ATTACHMENT File Location.
This table shows the default value for the AttachmentMode setting for each authentication mode.
| Authentication Mode | Default value for AttachmentMode |
|---|---|
Password |
DOCUMENT.ATTACHMENT |
Integrated Windows Authentication (IWA) |
DOCUMENT.ATTACHMENT |
Active Directory (AD) |
DOCUMENT.ATTACHMENT |
Active Directory/Active Directory Federation Services (AD/AD FS) |
none |
PingFederate (IFS CE) |
none |
The paths that you specify in the DOCUMENT.ATTACHMENT File Location determine where the file attachments are published when the Optiva objects are saved.
To prevent the potential for malicious security attacks against Optiva, file attachments are not supported in the cloud. Do not define any DOCUMENT.ATTACHMENT file locations if you are installing in a cloud environment.
Suppose you try to view or save a file attachment through Optiva. When any value other than DOCUMENT.ATTACHMENT is specified for AttachmentMode, Optiva assumes that the request is malicious and throws an exception. A message indicates that the file attachments are not supported for the current configuration.
Regardless of the AttachmentMode setting, all users can add URLs to the Attachments grid. As in prior releases, they must have the appropriate role security privileges to the Attachments grid.