How to deny access to images attached to not accessible pages?

[LAPS]

Hi,

I have a page for which I manage access so that guest users can not view it. This page has attached an image.

Of course, the basic page access settings works as expected for guests by denying them to view the page. However, when I, as a guest user, access directly the attached image via its URL then I can view the image!

How can I deny access also to the image?

 

[teppo]

You need to add pagefileSecure-setting to your /site/config.php file, and set it to "true":

$config->pagefileSecure = true;

More details here.

[LAPS]

Hi @teppo, thank you. It works. However, I had to edit and re-save the page. 

[kongondo]

Would field level access work as well? Access tab when editing a field

[Klenkes]

Field level access only protects the field from being shown on the frontend. The file is still accessable through an URL.