I have Orangehrm (symfony) on my server, and I need:
make that, users of the ESS group can not to download and somehow forwarding any documents in attachments.
Leave only the ability to view the document in the server environment.
Ideally, if it will be viewing documents in pop up mode.
All other groups of users will see the "download" button.
I will open access to ftp, and access to PHPMyAdmin.