[Feature] Disable Context Menu: Videos/Photo can be downloaded from the browser context menu when the download option is disabled.

[HearthisAt]

I have searched the existing feature requests to make sure this is not a duplicate request.

• Yes

The feature

If you share a photo or video from a link or album and disable the download option, visitors can easily download the assets using the copy option (button on the upper right of the asset viewer) or the browser context menu.

For videos, the download feature is also active through the native video controls.

I suggest adding the following attributes for videos: controlsList="nodownload" oncontextmenu="return false;"
And for photos: oncontextmenu="return false;"

I think this is very important to make it difficult to download and share content published in a private environment.

You should also consider preventing screenshots in your applications, as Google has done.

Thanks for reading

Platform

• Server
• Web
• Mobile

[bo0tzz]

The displayed image is a thumbnail version, without any metadata etc. Letting people view media without being able to capture it at all is a losing battle that isn't worth engaging in.

[benrwe]

I came here to discuss the copy button that still appears on shared links, even when the “Allow Downloads” toggle is turned off. Since this thread already touches on related concerns, I figured I’d add my perspective.

I fully understand that it's impossible to completely prevent all ways of saving photos. Once an image is visible, someone who is determined will always find a way. But removing the copy button in the UI would go a long way to discourage casual saving, especially for less tech-savvy users.

For example, my mom wouldn’t know how to take a screenshot or open a browser context menu, but she would absolutely tap a visible copy button. I figure turning off downloads should ideally mean no obvious save mechanisms in the viewer. Otherwise, it undermines the intent of the setting. There’s no point in disabling downloads if a copy button is still there.

This isn’t about trying to lock things down entirely, just about creating small hurdles to make it more difficult.
I hope you’ll please consider tying that button’s visibility to the existing download toggle.

[bo0tzz]

There’s no point in disabling downloads if a copy button is still there.

Yes there is. The original file includes all the metadata, including sensitive stuff like location. When downloading is disabled, there is no way to access that original and any actions that are still available only access the thumbnail file, which has had all the metadata stripped.

[benrwe]

I see, thanks for clarifying. That is helpful.

Even with that in mind, I don't feel very comfortable with the copy button being on public shares when I've disabled downloads. Although it's just a thumbnail, it's still a recognizable copy of the photo itself. Perhaps I'm missing something but I'm not really sure why public users still need to be presented with the option to copy the thumbnail when I've prevented downloading the original.

I was just hoping to be able to share family photos with my less tech savvy relatives without worrying about them copying them (with or without metadata, even at lower quality than the original) to somewhere like Facebook.

I would imagine it's possible to tie the same condition to the copy button as was for the download button, although I admit I'm not as well versed in making such a mod.

I came to Immich to find a more secure way of saving and sharing photos as I know many other folks have, so I'm confident I'm not the only person who would benefit from this relatively minor tweak. I very much appreciate your time and I hope you consider implementing this change. Thank you