Add Permissions

The PDF specification defines a set of permissions that may be set for encrypted documents.Permissions go into effect anytime an encrypted document is opened with the user password.Providing the owner password which is also known as the set permissions password or master password will give full access to the document.

pdfcpu provides minimal support for setting permissions. You can set either all or none permissions. Have a look at some examples.

Usage

  1. pdfcpu permissions add [-v(erbose)|vv] [-perm none|all] [-upw userpw] -opw ownerpw inFile

Flags

namedescriptionrequiredvaluesdefault
verboseturn on loggingno
vvverbose loggingno
permpermissionsnonone, allnone
upwuser passwordif set
opwowner passwordif set

Arguments

namedescriptionrequired
inFilePDF input fileyes

Examples

You have to provide any non empty password in order to change permissions.

For a document encrypted with just the owner password you have to provide opw to change the permissions:

  1. pdfcpu encrypt -opw opw enc.pdf
  2. writing enc.pdf ...
  4. pdfcpu perm list enc.pdf
  5. permission bits:            0
  6. Bit  3: false (print(rev2), print quality(rev>=3))
  7. Bit  4: false (modify other than controlled by bits 6,9,11)
  8. Bit  5: false (extract(rev2), extract other than controlled by bit 10(rev>=3))
  9. Bit  6: false (add or modify annotations)
  10. Bit  9: false (fill in form fields(rev>=3)
  11. Bit 10: false (extract(rev>=3))
  12. Bit 11: false (modify(rev>=3))
  13. Bit 12: false (print high-level(rev>=3))
  15. pdfcpu perm add -perm all enc.pdf
  16. Please provide all non-empty passwords
  18. pdfcpu perm add -opw opw -perm all enc.pdf
  19. adding permissions to enc.pdf ...
  20. writing enc.pdf ...
  22. pdfcpu perm list enc.pdf
  23. permission bits: 111100111100
  24. Bit  3: true (print(rev2), print quality(rev>=3))
  25. Bit  4: true (modify other than controlled by bits 6,9,11)
  26. Bit  5: true (extract(rev2), extract other than controlled by bit 10(rev>=3))
  27. Bit  6: true (add or modify annotations)
  28. Bit  9: true (fill in form fields(rev>=3)
  29. Bit 10: true (extract(rev>=3))
  30. Bit 11: true (modify(rev>=3))
  31. Bit 12: true (print high-level(rev>=3))

For a document encrypted with just the user password you have to provide upw to change the permissions:

  1. pdfcpu encrypt -upw upw enc.pdf
  2. writing enc.pdf ...
  4. pdfcpu perm list -upw upw enc.pdf
  5. permission bits:            0
  6. Bit  3: false (print(rev2), print quality(rev>=3))
  7. Bit  4: false (modify other than controlled by bits 6,9,11)
  8. Bit  5: false (extract(rev2), extract other than controlled by bit 10(rev>=3))
  9. Bit  6: false (add or modify annotations)
  10. Bit  9: false (fill in form fields(rev>=3)
  11. Bit 10: false (extract(rev>=3))
  12. Bit 11: false (modify(rev>=3))
  13. Bit 12: false (print high-level(rev>=3))
  15. pdfcpu perm add -perm all enc.pdf
  16. Please provide all non-empty passwords#
  18. pdfcpu perm add -upw upw -perm all enc.pdf
  19. adding permissions to enc.pdf ...
  20. writing enc.pdf ...
  22. pdfcpu perm list enc.pdf
  23. Please provide the correct password
  25. pdfcpu perm list -upw upw enc.pdf
  26. permission bits: 111100111100
  27. Bit  3: true (print(rev2), print quality(rev>=3))
  28. Bit  4: true (modify other than controlled by bits 6,9,11)
  29. Bit  5: true (extract(rev2), extract other than controlled by bit 10(rev>=3))
  30. Bit  6: true (add or modify annotations)
  31. Bit  9: true (fill in form fields(rev>=3)
  32. Bit 10: true (extract(rev>=3))
  33. Bit 11: true (modify(rev>=3))
  34. Bit 12: true (print high-level(rev>=3))

For an encrypted document that has both passwords set you have to provide both opw and upw to change the permissions:

  1. pdfcpu encrypt -opw opw -upw upw enc.pdf
  2. writing enc.pdf ...
  4. pdfcpu perm list -opw opw enc.pdf
  5. permission bits:            0
  6. Bit  3: false (print(rev2), print quality(rev>=3))
  7. Bit  4: false (modify other than controlled by bits 6,9,11)
  8. Bit  5: false (extract(rev2), extract other than controlled by bit 10(rev>=3))
  9. Bit  6: false (add or modify annotations)
  10. Bit  9: false (fill in form fields(rev>=3)
  11. Bit 10: false (extract(rev>=3))
  12. Bit 11: false (modify(rev>=3))
  13. Bit 12: false (print high-level(rev>=3))
  15. pdfcpu perm add -perm all enc.pdf
  16. Please provide all non-empty passwords
  18. pdfcpu perm add -opw opw -perm all enc.pdf
  19. Please provide the correct password
  21. pdfcpu perm add -upw upw -perm all enc.pdf
  22. Please provide all non-empty passwords
  24. pdfcpu perm add -upw upw -opw opw -perm all enc.pdf
  25. adding permissions to enc.pdf ...
  26. writing enc.pdf ...
  28. pdfcpu perm list -upw upw enc.pdf
  29. permission bits: 111100111100
  30. Bit  3: true (print(rev2), print quality(rev>=3))
  31. Bit  4: true (modify other than controlled by bits 6,9,11)
  32. Bit  5: true (extract(rev2), extract other than controlled by bit 10(rev>=3))
  33. Bit  6: true (add or modify annotations)
  34. Bit  9: true (fill in form fields(rev>=3)
  35. Bit 10: true (extract(rev>=3))
  36. Bit 11: true (modify(rev>=3))
  37. Bit 12: true (print high-level(rev>=3))