just a quick question:

is anyone running the d6-version of the video-module with drupal's filesystem set to private? i searched the issue-queue and found only issues about the d5-version. i have the problem, that the player shows up fine, but does not load the video. the rendered path is correct ('system/files/videos/converted/...' , but in my apache-logs i get 404s when i try to start streaming the video. i also have a working 'download the original'-link on the same node.
is private filesystem even supported by the d6-branch?

thanks in advance

Comments

ñull’s picture

Title: private filesystem support? » private filesystem not supported
Category: support » bug

I use the private file system with .htaccess redirection. Drupal is set to public files system, but the .htaccess redirects to the secure URL.

SetHandler Drupal_Security_Do_Not_Remove_See_SA_2006_006
Options None
Options +FollowSymLinks

RewriteEngine On

RewriteCond %{REQUEST_METHOD} ^GET$
RewriteRule ^(.*)$ /index.php?q=system/files%{REQUEST_URI} [L,QSA,R=301]

I use the above method in Apache because it give freedom to choose folders that are protected and that are not. This is usefull to enable css an js caching that is not private file system compatible either.

With a core CCK file field this would lead to "Access Denied" for content that a user is not supposed to see, for instance because an anonymous user tries to access an organic group file.

The video module is a widget of the CCK file field but it is not following the same behaviour and will not give any "Access denied". That must be because the core CCK File functionality is not respected. I don't think this is a feature request, because I think that a widget should not change the File field behaviour I report this as a bug.

ñull’s picture

The reason secure file system does not work has to do with they way converted video are stored. The original video is properly attached and appears in the file table which allows Drupal to check if the user is allowed to access the node with the file. The converted videos however are not stored this way and they don't appear in the file table associated to the node. This wrong way of storing related files will make it impossible for Drupal to check if the permissions of the file.

heshanlk’s picture

Status: Active » Closed (duplicate)
ñull’s picture

Category: bug » support
Status: Closed (duplicate) » Needs work

Why is this marked as dupilcate when the other issue refers to version 7.x? I cannot move to D7 to fix this bug.

erikwebb’s picture

Component: Miscellaneous » Video Trasncoding
Category: support » bug

I see a solution like this -

  1. Add a setting for a directory outside of docroot to convert videos into.
  2. Convert videos into this directory instead of files/videos/converted.
  3. After each conversion, use file_save_upload() to copy into files/ and save to files table.

I feel like this is a bug because it doesn't support a standard Drupal setup.

FYI - the "Video Trasncoding" component is misspelled.

Jorrit’s picture

Version: 6.x-4.x-dev » 6.x-5.x-dev
Component: Video Trasncoding » Video Core
Status: Needs work » Postponed

Maybe later, this requires a lot of work.

Jorrit’s picture

Category: bug » feature
sterndata’s picture

This is a showstopper for me. I need to have the videos private. Looking forward to an update.

Jorrit’s picture

Status: Postponed » Fixed

Fixed in 6.x-5.x-dev.

fluxrider’s picture

Status: Fixed » Active

not fixed for me using 6.x-5.0+12-dev (2012-May-07). Still getting "Storing videos in the Drupal file system is not supported when using private downloads." edit- sorry about this , hope this is the thread to open . I'm getting confused between the two threads .

Jorrit’s picture

Status: Active » Postponed (maintainer needs more info)

I think I forgot to delete that message. If you ignore that error, does it work?

fluxrider’s picture

Thank you Jorrit for posting. It does seem now to be working on private files ( though I am having bitrate issues in the preset for flash so not seeing any videos converted but I'm looking at that now. Looks like just that message in Status Report . getting ready to drag a site over to 7 so it gave me the shivers. I can just ignore it I guess. Thanks for your time on this.

Jorrit’s picture

Status: Postponed (maintainer needs more info) » Closed (fixed)

I hope all issues are resolved for you. If you still have problems related to this issue, please reopen it. Otherwise ope a new one.