Introduced a codedisableexport app option for Collabora

Author: glpatcern

src/core/wopi.py

@@ -118,11 +118,14 @@ def checkFileInfo(fileid, acctok):
             # if no WebDAV URL is provided, ignore this setting
             pass
         # extensions for Collabora Online
-        if acctok['appname'] == 'Collabora':
+        if 'Collabora' in acctok['appname']:
             fmd['EnableOwnerTermination'] = True
             fmd['DisableExport'] = fmd['DisableCopy'] = fmd['DisablePrint'] = acctok['viewmode'] == utils.ViewMode.VIEW_ONLY
+            if srv.config.get('apps', 'codedisableexport', fallback='False').upper() == 'TRUE':
+                fmd['UserCanNotWriteRelative'] = fmd['DisableExport'] = True
 
         res = flask.Response(json.dumps(fmd), mimetype='application/json')
+
         # redact sensitive metadata for the logs
         if srv.config.get('general', 'loglevel') != 'Debug':
             fmd['HostViewUrl'] = fmd['HostEditUrl'] = fmd['DownloadUrl'] = fmd['FileUrl'] = \

src/core/wopiutils.py

@@ -229,7 +229,7 @@ def generateAccessToken(userid, fileid, viewmode, user, folderurl, endpoint, app
     exptime = int(time.time()) + srv.config.getint('general', 'tokenvalidity')
     fname = statinfo['filepath']
     fext = os.path.splitext(fname)[1].lower()
-    if appname != 'Collabora' and viewmode == ViewMode.READ_WRITE and (
+    if 'Collabora' not in appname and viewmode == ViewMode.READ_WRITE and (
             fext in ('.doc', '.dot', '.xls', '.ppt', '.pps', '.csv') or
             fext[1:3] in ('od', 'ot') and srv.config.get('general', 'disablemswriteodf', fallback='False').upper() == 'TRUE'):
         # we're opening a legacy format file or an ODF (`.o[d|t]?`) and the app is not Collabora

wopiserver.conf

@@ -148,6 +148,8 @@ codeofficetypes = .odt .ott .ods .ots .odp .otp .odg .otg .doc .dot .xls .xlt .x
 # A flag to enable early features with Microsoft Office
 #earlyfeatures = False
 
+# A flag to disable 'Export As' in Collabora Online
+#codedisableexport = False
 
 [security]
 # Location of the secret files. Requires a restart of the