# Option to enable or disable file transfers in the file manager . Restrict who can upload or download data
**URL:** https://discourse.openondemand.org/t/option-to-enable-or-disable-file-transfers-in-the-file-manager-restrict-who-can-upload-or-download-data/2381
**Category:** Feature Requests and Roadmap Discussion
**Tags:** feature-request
**Created:** [November 21, 2022, 11:04am UTC](https://discourse.openondemand.org/t/option-to-enable-or-disable-file-transfers-in-the-file-manager-restrict-who-can-upload-or-download-data/2381 "2022-11-21T11:04:06Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@pescobar](https://discourse.openondemand.org/u/pescobar)
#### Post date: [November 21, 2022, 11:04am UTC](https://discourse.openondemand.org/t/option-to-enable-or-disable-file-transfers-in-the-file-manager-restrict-who-can-upload-or-download-data/2381/1 "2022-11-21T11:04:06Z")
Hi,
We are using Open OnDemand in a secure IT environment for health-related data ([https://www.biomedit.ch/](https://www.biomedit.ch/)) and we are missing an important feature for us.
For some of our projects we would like to restrict the data transfers to make sure that users cannot leak any data from inside the secure space, either unintentionally or on purpose. It would be great if Open OnDemand would provide a config flag to disable the “Upload” and “Download” buttons in the file manager. Is this possible?
Our ideal setup would be to be able to define a group (e.g. members of group “data-managers”) who can transfer files and restrict transfer for anyone else not belonging to this group. But just being able to restrict transfers for everyone would solve our main use case.
We are aware that we can restrict access to the file manager app by removing access al the file system level but we guess this would break the functionality for some other apps. Ideally we would like to restrict just file transfers.
best regards,
Pablo.
---
### Author:  [@travert](https://discourse.openondemand.org/u/travert)
#### Post date: [November 21, 2022, 2:39pm UTC](https://discourse.openondemand.org/t/option-to-enable-or-disable-file-transfers-in-the-file-manager-restrict-who-can-upload-or-download-data/2381/2 "2022-11-21T14:39:18Z")
Currently there is no way in the initial config to do something like this, however I think we could add something to check whether we want the `view` to display that button depending on the `group`.
We have an issue from someone already about this and I’ve opened an issue to specifically try to build this into the codebase for configuration.
>
>
> I understand that file upload can be globally disabled as explained here https:/…/osc.github.io/ood-documentation/latest/customization.html#set-upload-limits
> But how to disable it for some users ? or user groups ?
> And vice versa how to disable file download ?
>
> Thank you
>
>
>
> ┆Issue is synchronized with this \[Asana task\](https://app.asana.com/0/1202821104799596/1202823503508136) by \[Unito\](https://www.unito.io)
And the associated issue I’ve opened to try and build a solution:
>
>
> \# Request
> We've had some requests coming in to limit the ability to download an…d upload files in the files app based on groups:
>
> \- https://github.com/OSC/ondemand/issues/1589
> \- https://discourse.openondemand.org/t/option-to-enable-or-disable-file-transfers-in-the-file-manager-restrict-who-can-upload-or-download-data/2381
>
> This is a ticket to track how to do this.
>
> \# Possible Solution
> We could use the \`OodSupport\` object to grab the groups for users to at least use some kind of logic in the \`views/files/index.html.erb\` file to check if the user belongs to the \`data-management\` group (or some such name) and render the button only if the user is in that group.
>
> How to set the actual \`data-management\` group could maybe be done with the \`configuration\_singleton\` by having some one group per site given this accepted role and checked, or maybe an array with many roles appended that is checked. Either way, the idea is to have users set the name of these groups at install with an \`ENV\` variable, then have that list checked in the \`view\` to render the button if a use is in the group.
Sorry that is not possible now, but it is on our radar to do so thank you for the input!
---
### Author:  [@gbyrket](https://discourse.openondemand.org/u/gbyrket)
#### Post date: [November 21, 2022, 2:45pm UTC](https://discourse.openondemand.org/t/option-to-enable-or-disable-file-transfers-in-the-file-manager-restrict-who-can-upload-or-download-data/2381/3 "2022-11-21T14:45:50Z")
Hi Pablo. As per the announcement during SC '22, we will be having the Community vote on feature prioritization. Please track this issue ([Set File Upload and Downloads Permission by Group · Issue #2373 · OSC/ondemand · GitHub](https://github.com/OSC/ondemand/issues/2373)) so that when we begin voting, you will be able to vote on it.
Thanks,
-gerald
---
### Author:  [@pescobar](https://discourse.openondemand.org/u/pescobar)
#### Post date: [November 21, 2022, 3:02pm UTC](https://discourse.openondemand.org/t/option-to-enable-or-disable-file-transfers-in-the-file-manager-restrict-who-can-upload-or-download-data/2381/4 "2022-11-21T15:02:34Z")
Thanks for the quick reply.
I have added myself as watcher for both github issues to follow the progress.