INL/BlackLab

Seperate contentViewable permission for Web UI users and API users.

fishfree opened this issue · 1 comments

Somtimes, we need forbid the users in the corpus-frontend Web UI from viewing documents, and at the sametime need allow the API users getting the source documents text to further process.

This is not currently possible.

It would not be a secure way of restricting access to full document contents, because if the API allows retrieving source documents, any user can figure that out and write a script to do it.

If this insecurity is not a problem in your case, you could try to add a setting to the corpus-frontend that disables the document view.