Asset Link Share from AEM - Security and Configuration Questions | Community
Skip to main content
BrettBirschbach
BrettBirschbach
New Participant
April 3, 2019
Solved

Asset Link Share from AEM - Security and Configuration Questions

  • April 3, 2019
  • 12 replies
  • 9975 views

Is it standard practice to allow public access to the AEM Author (/linkshare.html, /linksharepreview.html, /linkexpired.html) for asset link sharing?  I assume we would also need to open up paths like /etc.clientlibs and potentially others?

Once I've shared an asset, is there any way for me to recover the share URL or change the expiration?  I can see "Shared Links" in the DAM navigation, but clicking one only allows me to "Unshare" - I don't see an option to view/edit.

Is there any way to configure asset link share to omit renditions in the download?

    Best answer by KrassimirBo

    Hi Brett.Birschbach​ - I am having the same problem with asset link sharing outside of the company firewall(s). I definitely don't want jeopardize the security of the author instance by opening it to the Internet. to  I am exploring an options to publish assets to one of the "publish" instance(s) living in the DMZ, and have an internal user role that can generate the assets share link from that same instance. of course replicating of that link to other publish instances will not work, which makes the solution not scalable at this point.

    Hope to hear more ideas from the community. 

    My client also is looking to share only certain renditions, but there is no such an option as you noted. We will be developing custom solution for this, but it would have been nice if Adobe includes it in the OOTB solution.

    12 replies

    Show previous replies
    BrettBirschbach
    BrettBirschbachAuthor
    New Participant
    April 3, 2019

    Hi Arun,

    Yes, that link you provided is where I grabbed the list of pages I mentioned in my original post.  In testing, it appears other paths (e.g. /etc.clientlibs) must also be opened to the public.

    My question was more generally asking if allowing public access to the author server for link shares is standard practice, since most author servers sit securely behind a firewall.

    Regarding Link Shares, yes, the method of seeing active Link Shares that you mention is how I am viewing them in AEM.  However, I do not see any option to open an existing share to edit it.  Do you?

    arunpatidar
    arunpatidar
    New Participant
    April 3, 2019

    Hi,

    Please check below:

    Asset link sharing

    Share assets as a link

    If you want to share links from your AEM Author instance to external entities, ensure that you only expose the following URLs (which are specifically used for link sharing) for GET requests only:

    • <AEM Server>/linkshare.html
    • <AEM Server>/linksharepreview.html
    • <AEM Server>/linkexpired.html

    Block other URLs to ensure that your Author instance is secure.

    To view the assets you shared as links, go to the Assets console and click/tap the GlobalNav icon. Choose Navigation from the list to display the Navigation pane.
    From the Navigation pane, choose Link Shares to display a list of shared assets.
    but you can't change the expiration?
    Arun Patidar
    Terms & ConditionsAccessibility statement

    Loading footer...