Follow-up to #2885507: Email sent via handler can't include link to private file for submissions by anonymous user

Problem/Motivation

Due to DRUPAL-PSA-2016-003 all file uploads are protected and require users to be authenticated.

When the URL for an uploaded file is included in a email, the link will return an access denied page for anonymous users. This is is very confusing for users.

Proposed resolution

When an anonymous user attempts to access a private webform file, we should redirect them to the login page with the private file as ?destination.

The login page can include a message that says 'Please login in to view this file.'

CommentFileSizeAuthor
#3 redirect_users_to_login-2888076-2.patch20.55 KBjrockowitz
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

jrockowitz created an issue. See original summary.

  • jrockowitz committed 03cc63b on 2888076-private-file-redirect 
    Issue #2888076: Redirect users to login page when trying to access the a...
jrockowitz’s picture

jrockowitz CreditAttribution: jrockowitz as a volunteer and at The Big Blue House commented
Status: Active » Needs review
FileSize
redirect_users_to_login-2888076-2.patch20.55 KB

  • jrockowitz committed a4af015 on 8.x-5.x 
    Issue #2888076 by jrockowitz: Redirect users to login page when trying...
jrockowitz’s picture

jrockowitz CreditAttribution: jrockowitz as a volunteer and at The Big Blue House commented
Status: Needs review » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.