I'm trying to develop a full access read only user profile. I have turned off select salesforce files permission, but I have noticed that you can still upload local files, be able to share files owned by others and download them. Turning off the tab still enables access to files Home, the files from object records' related lists in lightning pages and also upload to them.
Is there any way to block these actions for a particular profile to just preview only? More preferably through a permission set instead of custom triggers or rules?
Or, if not, what are the objects that make up 'Files' which I can block all of it entirely from users to instead?
Hi Natalie, unfortunately the only way I'm aware to handle this is through custom code, as explained here: https://ideas.salesforce.com/s/idea/a0B8W00000GdgbGUAR/make-some-content-preview-only-no-download
It would be fantastic if there were a permission set that could handle this, but unfortunately I'm not aware. If your organization by chance has Shield, there are some sercurity things you can do there with files. I can't recall exactly if you outright prevent download activities by certain users, but I believe you can set up audit monitoring so that the security team can be notified if someone were to take an action that is not desired, such as downloading files.
