# Secure View without Download, Print, etc buttons

**URL:** <https://forum.collaboraonline.com/t/secure-view-without-download-print-etc-buttons/3563>\
**Category:** Installation & Configuration\
**Created:** [March 31, 2025, 12:08pm UTC](https://forum.collaboraonline.com/t/secure-view-without-download-print-etc-buttons/3563 "2025-03-31T12:08:02Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![sebastiaanveld](https://avatars.discourse-cdn.com/v4/letter/s/a5b964/32.png) [@sebastiaanveld](https://forum.collaboraonline.com/u/sebastiaanveld)\
**Post date:** [March 31, 2025, 12:08pm UTC](https://forum.collaboraonline.com/t/secure-view-without-download-print-etc-buttons/3563/1 "2025-03-31T12:08:02Z")

</div>

I’ve a Team folder (Group folder) in Nextcloud where a certain group of user has read-rights only. When such a user opens the document with CODE the Secure View opens, so no editing capabilities are available. The file menu has has the Download, Print etc still available. Is there a way to remove those? I know the’re still some ways around downloading the document within Nextcloud anyway which requires some work there, so I would like to see if CODE has the capability to reomve these buttons beside that.

I’ve looked into feature locking, but do no really see a way how to achieve such.

> **[Configuration — SDK https://sdk.collaboraonline.com/ documentation](https://sdk.collaboraonline.com/docs/installation/Configuration.html?highlight=readonly#feature-locking)**

Thanks in advance!

Kind regards, Sebastiaan

---

<div class="post-metadata">

**Author:** ![darshan](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.collaboraonline.com/darshan/32/2230_2.png) [@darshan](https://forum.collaboraonline.com/u/darshan)\
**Post date:** [April 1, 2025, 2:00pm UTC](https://forum.collaboraonline.com/t/secure-view-without-download-print-etc-buttons/3563/2 "2025-04-01T14:00:20Z")

</div>

Hi @sebastiaanveld, welcome to the Collabora Online forums!

Great to see you here as well—just like on GitHub! 😉

Unfortunately, feature locking isn’t supported in the CODE version. 🙂

 ![image](https://europe1.discourse-cdn.com/flex013/uploads/collaboraonline/original/2X/4/4bf136ed5105b074067e27e1b33476eaaaba917e.png)

However, you might be able to use the **hide button** feature: [PostMessage API Documentation](https://sdk.collaboraonline.com/docs/postmessage_api.html?highlight=hide_button).

Cheers,  
Darshan

---

<div class="post-metadata">

**Author:** ![sebastiaanveld](https://avatars.discourse-cdn.com/v4/letter/s/a5b964/32.png) [@sebastiaanveld](https://forum.collaboraonline.com/u/sebastiaanveld)\
**Post date:** [April 1, 2025, 8:18pm UTC](https://forum.collaboraonline.com/t/secure-view-without-download-print-etc-buttons/3563/3 "2025-04-01T20:18:32Z")

</div>

Thx Darshan,

I found in [Control.StatusBar.js](https://github.com/CollaboraOnline/online/blob/master/browser/src/control/Control.StatusBar.js)  
{type: ‘customtoolitem’, id: ‘ **save** ’, command: ‘save’, text: \_UNO(‘.uno:Save’), lockUno: ‘.uno:Save’},  
{type: ‘customtoolitem’, id: **'print** ’, command: ‘print’, text: \_UNO(‘.uno:Print’, ‘text’), mobile: false, tablet: false, lockUno: ‘.uno:Print’},

Hide\_Button  
id:

Remove\_Button  
id:

id is the button ID

So I should use “Remove Button” and “is:save” in PostMessage.

Where do I put this? Do I put this in coolwsd config?

Kind regards, Sebastiaan

---

<div class="post-metadata">

**Author:** ![darshan](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.collaboraonline.com/darshan/32/2230_2.png) [@darshan](https://forum.collaboraonline.com/u/darshan)\
**Post date:** [April 2, 2025, 6:16am UTC](https://forum.collaboraonline.com/t/secure-view-without-download-print-etc-buttons/3563/4 "2025-04-02T06:16:58Z")

</div>

Hi Sebastiaan,

No, you **don’t** need to modify `coolwsd.xml`. The `Remove_Button` command via `postMessage` should be sent from the **Nextcloud frontend** , where Collabora is embedded inside an `<iframe>`.

Take a look at how Nextcloud’s **richdocuments** app handles this:  
[richdocuments - document.js (Line 288)](https://github.com/nextcloud/richdocuments/blob/main/src/document.js#L288)

Cheers,  
Darshan

---

<div class="post-metadata">

**Author:** ![darshan](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.collaboraonline.com/darshan/32/2230_2.png) [@darshan](https://forum.collaboraonline.com/u/darshan)\
**Post date:** [April 8, 2025, 11:24am UTC](https://forum.collaboraonline.com/t/secure-view-without-download-print-etc-buttons/3563/5 "2025-04-08T11:24:06Z")

</div>

Closed on April 8, 2025, 11:24am UTC