Jump to content

Protecting files / prevent direct access / pagefile secure


Recommended Posts

I'm experimenting with protecting files from users who haven't logged in.

Using the $config->pagefileSecure works, but is site wide and I need something where I can set the access per user. Currently it seems you have to be superuser in order to see files secured with this, which isn't very useful.

I'm running the latest dev version, so I tried the prevent direct access option in the page template. But it does not seem to do anything at all. With a clean installation, and playing around with the direct access settings I cannot make e.g. images non-accessible even when page is unpublished or trashed, or when user is not supposed to have access. It just doesn't seem to do anything at all.

Link to comment
Share on other sites

Only moments after posting this it suddenly started to work. Although it's a little unclear why. In the example images in Ryans post the pages general access management was turned off, but I needed to turn it on before anything happened. Perhaps it's an inheritance thing.

Next question... how can I make this work per page/user rather than template/role? Or at least per page/role?

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Create New...