---
title: "Revoke a prepared asset sharing link"
description: "Verify that disabling a test file sharing link changes its visible access state and that a separate recipient check can no longer access the asset."
canonical_url: "https://vostride.com/agent-library/files-media/share-link-revocation.md"
md_url: "https://vostride.com/agent-library/files-media/share-link-revocation.md"
content_kind: "recipe"
topic: "files-media"
---

# Revoke a prepared asset sharing link

Verify that disabling a test file sharing link changes its visible access state and that a separate recipient check can no longer access the asset.

## Risk

The owner's preview remains authorized after revocation, so opening it in the same signed-in view cannot establish link removal. Use a separate prepared unauthenticated recipient check as the access oracle.

## Fixtures

- A disposable document named Public-link fixture contains synthetic text and has a prepared share link.
- An approved external recipient verifier can request that exact link without owner credentials before and after revocation.
- The application contract says revocation denies new unauthenticated access while keeping the owner document intact.

## Steps

1. Open the document Share panel and verify link sharing is currently enabled.
2. Run the prepared recipient check and confirm the fixture document is accessible without owner credentials before changing anything.
3. Disable or revoke the link through the UI and verify the panel reports that link sharing is disabled.
4. Run the same recipient check again and verify access is denied according to the product contract.
5. Reload the owner document and verify its content remains accessible to the owner while the Share panel still shows the revoked state.

## Expected results

- The independent recipient check changes from allowed to denied for the same link.
- Owner access and the prepared document content remain intact after link revocation.
- The disabled sharing state persists after reloading the owner interface.

## False-pass traps

- The owner being able to open the file does not prove a revoked public link still works.
- A recipient verifier that reuses owner cookies would invalidate the access-boundary test.

## Cleanup

- Delete the disposable document and revoke any remaining fixture share links.

## Use with agent-qa

Adapt this test design to your application's acceptance criteria and configured target using the [recipe execution guide](/agent-library/software-factory/turn-a-recipe-into-an-agent-qa-test.md). External fixture setup and non-UI checks require your own supported hooks or test tooling. Validate the authored test, execute it, and inspect the completed evidence; this recipe is not a recorded test result.

## References

- [agent-qa test](/docs/agent-qa/configuration/test.md)
- [agent-qa first test](/docs/agent-qa/guides/first-test.md)
- [agent-qa web testing](/docs/agent-qa/guides/web-testing.md)

- [Files and media QA recipes](/agent-library/files-media.md)
- [Software factory QA library](/agent-library.md)