Controlling the Size and Type of Documents a user can upload

1 minute read time.

Large files have a cost. They hog disc space and in a Sage CRM system the upload of files will take time and can be a real drag on the system for other users.

Sage CRM has the ability for System Administrators to control the size of files being uploaded into the system but I think more importantly it has also added the ability to restrict the type of file that can be uploaded. It does this by allowing the System Administrator to block certain file extensions. This is so very important because it can prevent nasty 'accidents' when a file is downloaded again.

Consider a file with the extension "*.exe", you don't want that to automatically run when the file is downloaded by a user from the library.

To control the size and type of files, navigate to

Administration -> E-mail and Documents -> Documents & Reports Configuration

Click the 'Change' button to allow you to edit the options.

You can then change the options:

  • File Extension Restrictions: e.g. exe, hta, js, vbs

These are comma separated Values. Because the list of blocked file types is guarded by the file extension, any file that uses a file extension on the list cannot be uploaded or downloaded, nevermind what the reason is for wanting to use the file. (See below for some suggestions of file types to restrict)

  • File Size Limitation: e.g. 4MB
  • File Upload Limitation :e.g. 5

Setting the File Upload limitation restricts the number of files that can be added to the system at any one time.

You may want to consider restricting the following file types

Note: These are just the types of files that I can think of that are executeable, so this is NOT a definitive list.

  • AIR: Adobe AIR Installation Package
  • BAT: Batch File
  • CGI: Common Gateway Interface Script
  • CMD: Windows Command
  • COM: DOS Command File
  • ESH: Extended Shell Batch File
  • EXE: Windows Executable File
  • HTA: HTML Application
  • INX: Compiled Script
  • ISU: InstallShield Uninstaller Script
  • JAR: Java Archive File
  • JS: JScript Executable Script
  • JSE: JScript Encoded File
  • MSI: Windows Installer File
  • OBS: ObjectScript Script File
  • PAF: Portable Application Installer File
  • PIF: Program Information File
  • REG: Registry Data File
  • RGS: Registry Script
  • SCR: Script File
  • SCRIPT: Generic Script File
  • SHB: Windows Shortcut into a Document
  • SHS: Shell Scrap Object File
  • TLB: OLE Type Library
  • UDF: Excel User Defined Function
  • VB: VBScript File
  • VBE: VBScript Encoded Script File
  • VBS: VBScript File
  • VBSCRIPT: Visual Basic Script
  • WS: Windows Script
  • WSF: Windows Script File