DCV file download permissions within Nimble Studio

0

We need to allow Nimble Studio users to download files from nice DCV sessions, to their local machines.

There is general information on Nice DCV here: https://docs.aws.amazon.com/dcv/latest/adminguide/security-authorization.html

...however, in the context of Nimble Studio, when I am updating a Launch Profile's AMI, and I edit the C:\Program Files\NICE\DCV\Server\conf\default.perm file, and push that AMI update all the way through to a Lanuch Profile to boot up with that edited permissions default, it doesnt propogate through to the end users.

The default.perm file, when logged in as Administrator during the AMI update, had this added/edited to it (everything else remained commeted out):

[permissions]
%any% allow file-download

... when an End User boots the Launch Profile, with the updated AMI, their C:\Program Files\NICE\DCV\Server\conf\default.perm file has the following (!?):

[permissions]
%any% disallow builtin
%any% allow display audio-out pointer
%owner% allow builtin
%any% deny file-download

My users cant download the work they are producing in the cloud, looking forward to resolving this! :D

3dVAL
已提问 2 年前303 查看次数
1 回答
0

Hey there! On the permission side, if you would like to allow downloads for the owner and not for collaborators, you can remove the last line of the second config. Note that explicit denies cannot have an override and disallows will need to have a subsequent allow permission to override.

[permissions]
%any% disallow builtin #Dont allow any feature to anyone (can be overridden)
%any% allow display audio-out pointer #Allow everyone to display stream, audio out, and pointer control
%owner% allow builtin #Allow owner of session to have all features 

This config means everyone can collaborate, but they are limited to pointer control and audio out. The owner will have all features including download.

I suspect that Nimble Studios is overwriting your configuration. Have you tried updating the default.perm with a custom configuration?

profile pictureAWS
已回答 1 年前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则