.. _dossier-security:

Enable Dossier Security
========================================

If the dossier security is disabled, the dossier photos and attachments will be available by direct link regardless of the user rights. To increase dossier security, configure FindFace Multi to run all media requests through the DJANGO application for ACL checks. 

.. important::
   Enable the dossier media security only if you need it, as this setting has a severe negative impact on the system performance.

To enable dossier security, do the following: 

#. Open the ``/etc/findface-security/config.py`` configuration file. 

   .. code::

      sudo vi /etc/findface-security/config.py

#. Uncomment ``OVERPROTECT_MEDIA`` and set it ``True``.   

   .. code::

      ...

      'OVERPROTECT_MEDIA': False,

#. Open the nginx configuration file ``/etc/nginx/sites-available/ffsecurity-nginx.conf``. Uncomment ``internal`` in the ``location /uploads`` section.

   .. code::

      location /uploads/ {
         internal; # Uncomment if you intend to enable OVERPROTECT_MEDIA
         ... 
      }

#. Restart ``findface-security`` and nginx.

   .. code::

      sudo systemctl restart findface-security.service
      sudo systemctl restart nginx.service

#. After the new security policy is applied, logged-in users must re-authenticate. To make the users do so, execute the logout-all command:

   .. code::

      sudo findface-security logout_all_users