# Repository files view only

**URL:** <https://community.sonatype.com/t/repository-files-view-only/8369>\
**Category:** Best Practices\
**Created:** [March 14, 2022, 4:16pm UTC](https://community.sonatype.com/t/repository-files-view-only/8369 "2022-03-14T16:16:25Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![robarencibia](https://avatars.discourse-cdn.com/v4/letter/r/d26b3c/32.png) [@robarencibia](https://community.sonatype.com/u/robarencibia)\
**Post date:** [March 14, 2022, 4:16pm UTC](https://community.sonatype.com/t/repository-files-view-only/8369/1 "2022-03-14T16:16:25Z")

</div>

I am trying to make sure a file is viewable, not downloadable by a specific role. What type of configuration would I need to have on the file or repository?

---

<div class="post-metadata">

**Author:** ![mmartz](https://avatars.discourse-cdn.com/v4/letter/m/e9bcb4/32.png) [@mmartz](https://community.sonatype.com/u/mmartz)\
**Post date:** [March 14, 2022, 5:25pm UTC](https://community.sonatype.com/t/repository-files-view-only/8369/2 "2022-03-14T17:25:30Z")

</div>

You want to make sure the user has the `browse` permission but not the `read` permission for the file/repository. I believe file-level permissions will override the repository permissions. You can find more information at [Access Control](https://help.sonatype.com/repomanager3/nexus-repository-administration/access-control).