Cannot access file from form notification if not logged into Sitefinity
I am not sure if this is by design or not. We have a client that put together a application for employment style form and used the file upload widget to allow people to upload resumes. The notification that gets sent back has a link you can click to download the resume, but if you are not logged into Sitefinity you will receive the error "this type of page is not served". If you login and then try again it will work.
I can partially understand the original thinking behind this if it is intended to function this way, but the fact that you can now send these responses to a list of other emails that may not be Sitefinity users (i.e. Human Resources) is going to be problematic.
Agreed! I've run into the same issue. Any planned solutions?
Hello Guys,
The behavior you notice is the default one for our Forms functionality. When a form contains a fileupload control, the field creates an library for the files under Administration->User Files. Based on the permissions you set on this library you will be either able to view the documents uploaded from the notification link or not. If you want anonymous users to access this document, go to the library, click actions, Set Permissions and set the View Document permission set to Everyone.
Regards,
Ivan D. Dimitrov
Telerik
Would it be possible in the future to make a configuration setting that would control whether the files are sent as attachments to the form notification email OR as links (and stored in the library)? We have several websites that would prefer such functionality as the recipients of the form notifications are not content managers of the website and therefore have no need to have access to the Sitefinity backend. For example, on one of our websites there is a form for internship interest. The group that receives the form notification is the HR group and they have nothing to do with the website directly.
Hi Christine
I would recommend to work with an expert to get detailed solution to your problem. You may consult a professional Sitefinity developer or agency. They may be able to help you resolve the issue.
Regards
Shilpi
IDS Logic (Sitefinity Development Agency)
Hello Ivan,
I'm running Sitefinity 8.0 and am experiencing the same permissions issue.
However I do not see User Files under the Administration dropdown in the admin. Where do I need to go to set View Document permissions in 8.0?
Thanks
EDIT: I've found this:
Administration > Permissions > Libraries > View Document & View Document Library
I've set both of these to "Everyone".
However, I still cannot open the file upload links unless I'm logged into the Sitefinity admin in that browser.
Hi Jimi,
Please refer to the below KB article for more details on how to allow anonymous users to access the files form the form responses:
http://www.sitefinity.com/developer-network/knowledge-base/details/how-to-allow-anonymous-users-to-access-the-files-from-the-email-notifications-for-form-responses
Please log in with a user in Administrator role and you should be able to see the User Files link under the Administration tab in the backed. This way you will be able to change the view permissions of the library where the files from the form responses are stored as described in the above article.
Regards,
Sabrie Nedzhip
Telerik
Hi there,
If we allow anonymous users to view the files attached in form responses, will the files be searchable on the web? The attached files may contain sensitive information (e.g. resume or personal particulars) .
Thanks!
Hello Ervelyn,
When the View permissions of the form's library is changed to Everyone, the files uploaded through the forms will be searchable. Thank you very much for pointing this out. I updated the KB article and included a note related to this:
http://www.sitefinity.com/developer-network/knowledge-base/details/how-to-allow-anonymous-users-to-access-the-files-from-the-email-notifications-for-form-responses
Regards,
Sabrie Nedzhip
Telerik
Is there now a way with 10.1 or 10.2 to attach the uploaded resume file in the notification email instead of linking.