lebryld
August 7, 2010
8:56am
I am trying to have a closed (members-only) site up and running. Therefore, all permissions to anonymous users are off.
Presently, I have added a new field to the News content type in order to be able to upload PDF files.
Label: PDF - Name: field_pdf - Field: file - Widget: file
Unfortunately for my use, anybody - logged in or not - can view or download these PDFs, if they can get hold of the exact URL.
As the path is very obvious, it's mainly a matter of guessing the PDF file name.
Isn't there a way of avoiding this? I was hoping for a setting where the PDF file could be put outside of the web scope, or at least a .htaccess of some sorts preventing direct download.
Status: Resolved
Comments
12:00pm
Hello there,
Role/permission-based content access in the future, but it is not in the beta now. Therefore, there is no way to restrict access to this content.
Tracking as #AN-12634
Would using a file system, such as Google Docs, where you can upload files work on a temporary basis?
I have added your comments to that issue Re: file uploads.
Heather James
Gardens Advisory Team | @learningdrupal
8:18pm
Good news! This feature, content access control is now implemented in the current release for sites on the Professional plan or higher. For details see the release notes
Chris Brookins
VP Engineering and Product Management, Acquia - blog - twitter -
5:59pm
Hi there,
For Professional plans and higher, you can now have fine-grained access control for forum topics in Drupal Gardens!
As of our latest service update on March 12th, you can define access control rules describing which users (by role) can view, edit, or delete a forum topic. Role indicators can also be applied to forum topics to highlight which topics are restricted.
For more information on the latest Gardens feature enhancements, check out our recent 'What's New' release announcement.
Thanks!
Best regards,
Stacy Wray | Drupal Gardens Client Advisor