Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-84944

Tiny/RecordRTC: disable easy download of audio/video

    • Icon: Improvement Improvement
    • Resolution: Unresolved
    • Icon: Minor Minor
    • None
    • 5.0
    • Text editor TinyMCE
    • MOODLE_500_STABLE
    • MDL-84944-master
    • Hide
      1. Navigate to the Edit profile page.
      2. Click on the Video record menu.
      3. Click on the "Record video" in the context menu.
      4. Click on the "Stop  recording" button
      5. Verify "Allow clip download" checkbox should exist and auto-checked at the bottom of modal
      6. Click on the "Attach recording" button
      7. Select the three-dot menu on video in the tinyEditor
      8. Verify the 'download' icon should display (If unticked 'Allow clip download' checkbox, then we need WebRTC to forbid the browser from allowing the download of the file, and that 'download' icon should not display.)
      Show
      Navigate to the Edit profile page. Click on the Video record menu. Click on the "Record video" in the context menu. Click on the " Stop  recording " button Verify "Allow clip download" checkbox should exist and auto-checked at the bottom of modal Click on the "Attach recording" button Select the three-dot menu on video in the tinyEditor Verify the 'download' icon should display (If unticked 'Allow clip download' checkbox, then we need WebRTC to forbid the browser from allowing the download of the file, and that 'download' icon should not display.)
    • Show
      Code verified against automated checks with warnings. Checked MDL-84944 using repository: https://github.com/NashTechOpenUniversity/moodle main (0 errors / 7 warnings) [branch: MDL-84944-master | CI Job ] overview (0/0) , phplint (0/0) , phpcs (0/0) , js (0/0) , css (0/0) , phpdoc (0/0) , commit (0/0) , savepoint (0/0) , thirdparty (0/0) , externalbackup (0/0) , grunt (0/0) , shifter (0/0) , mustache (0/7) , gherkin (0/0) , Should these errors be fixed? Built on: Fri May 23 09:30:03 UTC 2025

      Currently, when you record an audio or video clip using the Tiny RecordRTC buttons, anyone can download your file (though the ease of this changes by browser.

      We propose adding a setting to disable the 'easy' AV clip download.
       
      So, especially for this ticket, we need to do some actions below for the new TinyMCE editor

      1. New option under the 'Attach recording' button to allow or disallow clip download: 
      • "Allow clip download" checkbox.
      • Help text: "Unticking this option means that the AV clip should not be downloadable via the browser media player menu, via the context menu, or display the download icon. However, it cannot be guaranteed that determined users cannot access and download the file by other means."
      1. This option controls the availability of the browser media bar 'download' menu/options and download icon.

      Obviously, we know that we can't stop this from happening, but we can make it slightly more difficult to download

      Currently, the interface (for a video) looks like this after the recording has been made, but before it is attached:

      The simplest solution for both audio and video recording interfaces is to add a checkbox, which is auto-selected by default, labeled "Allow clip download.". This allows the clip to be downloaded via the browser media players and the 'download' icon that we're adding/have added

      If unticked, then we need WebRTC to forbid the browser from allowing the download of the file, and that 'download' icon should not display.

       
      Back to the new text: the help text would say something like: "Unticking this option means that the AV clip should not be downloadable via the browser media player menu, via the context menu, or display the download icon. However, it cannot be guaranteed that determined users cannot access and download the file by other means."
       
      (There's probably an accessibility requirement for a text description field that needs adding for attaching videos this way too).

        1. current.png
          current.png
          41 kB
        2. expected.png
          expected.png
          47 kB

            toanlam Toan Lam
            toanlam Toan Lam
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:

                Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.