Educause Security Discussion mailing list archives

Filelocker 2 Now Available on SourceForge


From: Brett Davis <wbdavis () PURDUE EDU>
Date: Fri, 17 Dec 2010 16:27:05 -0500

I want to officially announce that Filelocker 2 has been made available for download on SourceForge. Currently, the 
tested configurations we've been running use CAS for authentication and user information is pulled from an LDAP 
directory. Both the authentication and the directory portion can be run out of the local database as well for testing 
and smaller deployments.

Some notable features:
-Secure Messaging: Allows users to send sensitive data through Filelocker. Think Facebook messaging, but with strong 
encryption and the added ability to "recall" a message. Deleting a message from your "Sent" folder removes it from the 
system entirely, and any recipients who've not yet read the message will no longer be able to do so. The history table 
makes note of when a recipient has read a message.

-Highly granular auditing and activity logging. The history page shows when you uploaded, downloaded, shared, had 
people download your files, when people read messages you sent them, etc.

-Notify on download: You can have Filelocker email you when a file you've uploaded has been downloaded by someone else

-Groups: You can create groups of users you share with frequently to expedite the sharing process

-Upload Requests: You can generate an upload request if you would like a user who does not have a Filelocker account to 
upload a file to your account space.

-Public Sharing: Allows you to share a file with users outside of Filelocker using a URL. One time use and multiple use 
links(multi use links require passwords).

-Attribute sharing: Using the plugin interface, you can write a plugin to make a call to some external data source 
(LDAP, webservices,  whatever you like) to get information about a user when they log in (such as whether they are 
staff, in a certain class, etc) so that you can share files with users based on this information. This is extremely 
useful for software distribution purposes. An example plugin file exists in the plugin directory for a webservices call 
to grab user information at login time.

-User roles: Special purpose accounts can be created as a "Role", which allows other users to act on behalf of this 
role. For example, if department X wants to share a CD ISO with the entire department, but doesn't want the ISO file to 
be owned by an individual user, the "Department X File Distributor" role can be created, and select users can be 
granted permission to act as this Role. This also allows uploads for departmental file distribution to not have to 
count against and individuals file space quota.

Some Things we'd like to improve:
- We only support MySQL databases right now, so if anyone out there has a spare Python coder to basically convert the 
MySQLDAO.py into an OracleDAO or an MSSQLDAO.py, we'd love the help! 

-Interface pagination for long lists of uploaded files and long lists of users: If anyone has some javascript 
programmer resources who'd like to take a crack at this, we'd greatly appreciate it.

-Lightbox rendering problems in IE7

I'll try to beef up the documentation in the coming months, but hopefully the setup.py file should make the initial 
config fairly simple. If you decide to set up an instance, please don't hesitate to contact me with questions. However, 
for a more streamlined approached to bug reports and features requests, I'd ask that you use the SourceForge project 
page.

The project may be downloaded at sourceforge.net/projects/filelocker2/

Happy sharing!

-- 
Brett Davis, CCNA, GSEC
IT Network and Security Operations
Purdue University
YONG 602
Phone (765) 49-62304
wbdavis () purdue edu


Current thread: