Secure document sharing
Disclosed are various embodiments for sharing documents among users of an enterprise as well as with users external to an enterprise. A document is identified and document components extracted from the document. A browser representation is generated that, when rendered or interpreted by a browser, causes the browser to generate a user interface that presents at least a portion of the document as the document would be viewed by a native viewer.
1. A non-transitory computer-readable medium embodying a program executable in a computing device, the program, when executed by the computing device, being configured to cause the computing device to at least:
obtain a first request to share a document with a destination on behalf of a user account;
extract a document layout and a document structure from the document, the document layout defining a visual layout of content of the document and the document structure defining a logical structure of the content of the document;
identify a compliance rule associated with at least one of the user account or the document, wherein the compliance rule specifies applying a security restriction to the document;
receive a second request from a client device to access the document, wherein the client device is associated with the destination;
determine that a context of the second request complies with the compliance rule;
generate a document representation of the document according to the security restriction in response to the context complying with the compliance rule, wherein the document representation is based on the document layout and the document structure; and
transmit a reference to the document representation to the destination, wherein upon activation, the reference activates client-side code to display the document representation based on a device property associated with the client device.
2. The non-transitory computer-readable medium of claim 1 , wherein applying the security restriction further causes the computing device to at least:
remove textual content in the document representation based on identifying a keyword that is included prior to the textual content in the document, wherein the textual content is labeled as not permitted for redistribution.
3. The non-transitory computer-readable medium of claim 1 , wherein the device property comprises at least one of a display resolution, a display device, or a browser version.
4. The non-transitory computer-readable medium of claim 1 , wherein determining the context of the second request complies with the compliance rule further comprises determining that the second request is within an authorized time window.
5. The non-transitory computer-readable medium of claim 1 , wherein the client-side code comprises a scripting language interpreted by a browser.
6. The non-transitory computer-readable medium of claim 1 , wherein the security restriction comprises enforcing a limitation on root access privileges for an operating system of the client device.
7. The non-transitory computer-readable medium of claim 1 , wherein the security restriction comprises a command for the client device to communicate with a management system within a specified amount of time, wherein the management system manages an operating system of the client device.
8. A system, comprising:
a computing device;
programming code executable in the computing device, the programming code causing the computing device to at least:
obtain a first request to share a document with a destination on behalf of a user account;
extract a document layout and a document structure from the document, the document layout defining a visual layout of content of the document and the document structure defining a logical structure of the content of the document;
identify a compliance rule associated with at least one of the user account or the document, wherein the compliance rule specifies applying a security restriction to the document;
receive a second request from a client device to access the document, wherein the client device is associated with the destination;
determine that a context of the second request complies with the compliance rule;
generate a document representation of the document according to the security restriction in response to the context complying with the compliance rule, wherein the document representation is based on the document layout and the document structure; and
transmit a reference to the document representation to the destination, wherein upon activation, the reference activates client-side code to display the document representation based on a device property associated with the client device.
9. The system of claim 8 , wherein applying the security restriction further causes the computing device to at least:
remove textual content in the document representation based on identifying a keyword that is included prior to the textual content in the document, wherein the textual content is labeled as not permitted for redistribution.
10. The system of claim 8 , wherein the device property comprises at least one of a display resolution, a display device, or a browser version.
11. The system of claim 8 , wherein determining the context of the second request complies with the compliance rule further comprises determining that the second request is within an authorized time window.
12. The system of claim 8 , wherein the client-side code comprises a scripting language interpreted by a browser.
13. The system of claim 8 , wherein the security restriction comprises enforcing a limitation on root access privileges for an operating system of the client device.
14. The system of claim 8 , wherein the security restriction comprises a command for the client device to communicate with a management system within a specified amount of time, wherein the management system manages an operating system of the client device.
15. A method, comprising:
obtaining, by a computing device, a first request to share a document with a destination on behalf of a user account;
extracting, by the computing device, a document layout and a document structure from the document, the document layout defining a visual layout of content of the document and the document structure defining a logical structure of the content of the document;
identifying, by the computing device, a compliance rule associated with at least one of the user account or the document, wherein the compliance rule specifies applying a security restriction to the document;
receiving, by the computing device, a second request from a client device to access the document, wherein the client device is associated with the destination;
determining, by the computing device, that a context of the second request complies with the compliance rule;
generating, by the computing device, a document representation of the document according to the security restriction in response to the context complying with the compliance rule, wherein the document representation is based on the document layout and the document structure; and
transmitting, by the computing device, a reference to the document representation to the destination, wherein upon activation, the reference activates client-side code to display the document representation based on a device property associated with the client device.
16. The method of claim 15 , wherein applying the security restriction further comprises:
removing textual content in the document representation based on identifying a keyword that is included prior to the textual content in the document, wherein the textual content is labeled as not permitted for redistribution.
17. The method of claim 15 , wherein the device property comprises at least one of a display resolution, a display device, or a browser version.
18. The method of claim 15 , wherein determining the context of the second request complies with the compliance rule further comprises determining that the second request is within an authorized time window.
19. The method of claim 15 , wherein the client-side code comprises a scripting language interpreted by a browser.
20. The method of claim 15 , wherein the security restriction comprises enforcing a limitation on root access privileges for an operating system of the client device.