Use Send for Text only

[dwestness]

I would love to be able to use the Send feature to be able to share ad-hoc sensitive data/password/etc, but my organization's security admins will not permit the use of it due to the risk of file sharing specifically and concerns of improper data leakage.

They are ok with the sending Text based sends however. Of course my options are only to disable send as a whole. I would love to see some ability to permit my users to utilize Text based SEND, while still restricting the ability to send files in this fashion.

[stefan0xC]

You can disable file uploads by setting USER_SEND_LIMIT=0.

[dwestness]

Does that flag allow unlimited TEXT sends, and only limits FILE sends?
I wasn't sure if TEXT sends also count towards the overall storage limit of send per this documentation.

The documentation indicates:

Per-user send storage limit (KB)

Max kilobytes of send storage allowed per user.

When this limit is reached, the user will not be allowed to upload further sends.

[stefan0xC]

It should only affect file uploads:

vaultwarden/src/api/core/sends.rs

Lines 319 to 320 in a2ad1dc

	let size_limit = match CONFIG.user_send_limit() {
	Some(0) => err!("File uploads are disabled"),

[dwestness]

I just tested this flag and it does work as you mentioned. I am able to send TEXT based sends, while file based sends result in the "File uploads are disabled" message.

This is excellent! Thank you so much for pointing this out. I had seen this option previously, but the documentation didn't make be feel confident that it was limited to file uploads only so i disregarded it.

[stefan0xC]

Yeah, I mean it would be nicer if this would also disable file uploads (which we could probably do in the web-vault via custom css) but I don't think that we can control the behavior of other clients. I think upstream it's only disabled for non-premium accounts (which we don't have in Vaultwarden...)