# AI access to files

> When an AI service needs a project file by link: the permission window, the toggles in Settings, the log of issued links and how to revoke access.

Source: https://docs.slicer.media/en/guide/projects/ai-access/

Normally a project's files open only for you: Slicer serves the video, sources and media after you sign in, and hands AI services the pieces they need itself. But some AI models can only take a file **by link** — right now that's the [object removal](https://docs.slicer.media/en/guide/editor/erase/) model. For them Slicer issues a temporary secret link to the piece they need — and only with your permission.

## The permission window

Before an operation that needs a link, Slicer shows the **AI access to a file** window: what exactly will be opened, for how long and why. For object removal, for example, it's a piece of this fragment and the object mask.

| Choice | What happens |
| --- | --- |
| **Allow once** | links are issued for this run only; next time Slicer asks again |
| **Allow for this project** | access to this kind of file is turned on in the project's **Settings**, and Slicer stops asking in this project |
| **Don’t allow** | the operation doesn't start, nothing is shared, no tokens are spent |

A permission only works in its own project: in another project Slicer asks again.

## What a link opens

-   **Only the piece that's needed.** Not the whole source and not the project — exactly what the model needs: for object removal, a piece of the fragment (up to 5 seconds) and the object mask, each with its own link. A fragment longer than 5 seconds is sent in several pieces.
-   **An hour at most.** A link expires after an hour even if nothing happened to it.
-   **Revoked right after processing.** As soon as the model returns the result, the link stops working and the copy of the piece is deleted.
-   **Links can't be guessed.** A link contains a long random key, and the copy of the piece is stored encrypted, like all Slicer files.

## Settings

The **AI access to files** block is in the project's **Settings** section, just before project deletion. Three toggles — which project files may be opened by link without asking before every operation:

-   **Sources** — the montage materials and pieces of them (object removal needs this);
-   **Own media** — photos and videos added in the editor;
-   **Finished video** — the exported file.

Everything is off by default. You can turn access on in advance so Slicer doesn't ask — or from the permission window with **Allow for this project**. **Turn a toggle off and active links of that kind are revoked at once.**

## The link log

Below the toggles is **Issued links**: every link Slicer has issued in this project. Until there are any, it says **No links yet**. Each row shows:

-   what for — for example, **Object removal**;
-   what was opened — the source number and the seconds of the piece, with a note for the mask;
-   when it was issued;
-   **active** or **revoked**;
-   how many times the service downloaded the file — “downloaded: 1”.

If any link is still active, there's a **Revoke all links** button below the list: it kills them immediately. If the operation that needed the link is still running, it may fail — then its tokens come back.

## Good to know

-   Links give no access to your account, other files or other projects: a link only lets someone download one piece.
-   A link that couldn't be revoked right away (for example, while the server was restarting) is killed by Slicer automatically when it expires.
-   More about how files are protected and other links that work without signing in — on the [Security](https://docs.slicer.media/en/security/#ai-links) page.

## What's next

-   [Remove object](https://docs.slicer.media/en/guide/editor/erase/)
-   [Project: sources, settings, editor](https://docs.slicer.media/en/guide/projects/project/)
-   [Data storage](https://docs.slicer.media/en/guide/help/data/)