BUSINESS EDITION
Site policy
A small file written by your quality or IT unit. Loaded once in each browser that sends, it refuses files and transfers that do not match your rules, before anything is shown on screen.
What it checks
- File types. Only the extensions you list may be chosen. With several files selected, one file outside the list stops the whole selection.
- Size. No single file above the limit.
- Work order. The reference must match your format exactly, for example WO- and six digits.
- Classification. Only the classifications you allow.
- Operator. Optionally, nothing is sent without the operator's name or ID.
Each refusal names the rule and the policy, so the operator knows what to change. The transfer log records which policy was active for every transfer, so a reviewer can see transfers made without it.
An example
{
"kind": "kionel-policy",
"version": 1,
"name": "QC laboratory",
"revision": "2026-10",
"allowedExtensions": ["csv", "txt", "pdf"],
"maxBytes": 10485760,
"referencePattern": "WO-\\d{6}",
"referenceHint": "WO- followed by six digits, e.g. WO-004213",
"classifications": ["confidential", "restricted"]
}Download this example, change it, and load it with Load site policy under the licence on the transfer page.
Fields
| Field | Meaning |
|---|---|
kind, version | Always "kionel-policy" and 1. |
name, revision | How the policy is shown and recorded in the log. Change the revision when you change the rules. |
allowedExtensions | Extensions in lower case, without the dot. Leave it out to allow any type. |
maxBytes | Largest file in bytes; 10485760 is 10 MB. The edition's own limit still applies. |
referencePattern | A regular expression the whole work order must match. In JSON a backslash is written twice. |
referenceHint | The format in words, shown when a work order is refused. |
classifications | Any of internal, confidential, restricted. |
requireOperator | true to refuse a transfer without the operator's name or ID. The name is signed into the record as declared; it is not a login. |
A policy with a misspelt field is refused when it is loaded, with the field named, so a typing error cannot silently switch a rule off.
What it is not
It is a guard against mistakes, not access control: someone at the PC can remove it from the browser, with a confirmation. That is why the log records it. For the offline package, load it once on each PC, the same way as the licence.