SecureView - View of 3d-files without download option if download permission is dinied for internal/external shared folders/files

[TinoJa]

Is your feature request related to a problem? Please describe

Sharing files/folders with another user or via a link, and only giving view permissions and disallowing download, allows viewing documents with some apps, but not viewing 3D files. This is a real pity! So I can't share my own designed 3D models without copy protection.

Describe the solution you'd like

The integration of a SecureView would be helpful, so that with these security settings when sharing, the files can still be viewed in the cloud. To do this, download options would have to be blocked on the app side and this SecureView would have to be registered for Nextcloud, as for example with OnlyOffice.

Describe alternatives you've considered

External 3d model portals, like:

• Sketchfab
• Modelo
  But this options are not secure enough for my usage and commercial exensie

Additional context

Would be nice to see this feature as fast as possible and open the nextcloud maybe for more usage for 3d models.

[kroko]

I do not know much about SecureView. Just read this and as I understand it is name for the option to "hide download".

When ‘Hide download’ is enabled, PDF documents and images will appear on the viewers screen without the menu options to download the file(s) or add them to their own private cloud.

May I ask you to test a behaviour - try sharing a directory that holds some 3d file(s) (do not share single file!) and disallow downloading. The one that has share url should see the dir of 3d files, can view them, but no download button is present. Is this the behaviour you're looking for?

If you would try to do it with "just sharing one file" it is a known issue with the current implementation #4 (comment)

Whatever the case - it is practically impossible to achieve what you are asking for. Ability to view file automatically means ability to download them (it is actually downloaded once you view it - everything you see in your browser is downloaded, every image, every video, font, whatever). Viewing means downloading under the hood. Hiding download button does nothing in terms of security you are seemingly looking for. It can be applied to broader discussion on how web works.
I could theorise that in order for you to achieve what you are asking for is to never pass 3D file to the client, just "image of it", which technically can be achieved by realtime server side rendering - server opens 3D file, renders it to an image, receives your mouse commands about how you want to rotate/zoom it, does that, takes as "screenshot" and pipes that image to browser so that the viewer only sees "image". So you don't view actual 3d file, but just stream of images of it. Such functionality is out of scope for this app.

[TinoJa]

OK, I mean rather the extension of this SecureView you mentioned. Maybe it has another name. ... Comment: No it is more optimised. My users will be manly B2B and they are no IT-Professionals. ;) I know there is no 100% Security, but sharig files, that can't be viewd by the user is a useless function in my eyes.

I shared a full folder with OBJ, MTL, and PNG file.
In Nextcloud 27.0.2 the sharing settings looks like this:

However, I can still view documents with Only-Office, but I can't download them in any way (trick) that I know of.
Normally the app Nextcloud Office (Collabora Online) looks like that:

But with the used shared seettings it looks like that:

No download, print or writing options are shown, it looks like an picture, also right click isn't working.

The 3DModelViewer app looks like that: No model shown.

And if I klick on download I get an permission error.

PS: For myself as a normal user the 3DModelViewer seemed to show only rendered images. That why I asked. If I use right click on the shown model, i can only download an HTML-file. So if download and right-klick options are hided and the model can be shown, it is in my eyes enough security.