24Files and Security

24Files Security and Integration Essentials

Built on Salesforce: 24Files is developed entirely on the Salesforce platform, ensuring robust security and seamless integration. It connects with SharePoint through APIs, ensuring that no files are stored on any 24Files or third-party servers.

Authentication and Authorization: 24Files does not store any SharePoint credentials. Instead, it utilizes an OAuth authorization flow, redirecting users to SharePoint for authentication. This approach maintains security and integrity by relying on established protocols for user verification.

Salesforce Security Review: As a listed solution on Salesforce's AppExchange, 24Files has undergone a thorough security review by the Salesforce team. This review confirms its adherence to best practices in software security.

Role-Based Access Control: Leveraging Salesforce's security model, 24Files defines multiple roles including admin, user, and community user, each with specific permissions to suit different levels of access and interaction within the system.

SharePoint API Permissions: To perform API calls on SharePoint effectively, 24Files requires certain permissions, which are set to the minimum needed for functionality. One key permission is AllSites.Write, which allows users to add content to libraries without the capability to create new libraries or alter the structure of existing ones.

Managing Access and Permissions with SharePoint

Direct Inheritance of Permissions:

• Seamless Integration: By integrating directly with SharePoint, 24Files inherits all predefined access settings from SharePoint. This ensures a consistent and streamlined management of access rights across both platforms.

Controlled Access Based on User Rights:

• Rights-Specific Visibility: Users will only be able to see the files and folders in 24Files that they are authorized to view in SharePoint. If a user doesn’t have access to certain data in SharePoint, they won’t have access to that data in 24Files either.

Benefits of Permission Inheritance:

• Maintenance Efficiency: The direct inheritance of permissions from SharePoint to 24Files avoids the need for managing multiple permission systems, reducing complexity and maintenance overhead.

• Enhanced Security: Utilizing SharePoint’s robust security measures, 24Files ensures that sensitive information is protected and accessible only to authorized personnel.

• User Familiarity: The use of a familiar permission model reduces the learning curve for users and promotes better adoption and user experience.

This integrated approach not only streamlines how permissions are managed between SharePoint and 24Files but also maintains a high level of security and data integrity, ensuring that only the right users have the right access at the right times.