Hi,

Do i need to use private files at Drupal's file system settings or i can use this module with public files?

thanks

Comments

andreiashu’s picture

Hi,

Very good question/point (I should add it on the project page).
You can definitely use this module with public files setting turned on in Drupal. Actually this is how I created it and how it was tested so far. :)

Regards,
Andrei

carvalhar’s picture

but are these files accessible by direct url?
I mean, if i type:
http://example.com/sites/default/files/myprivatefile.pdf
Will I be able to download it, even without permission?
Anonymous users are checked also?

Thanks

carvalhar’s picture

Hi,

I checked right now.

As anonymous user i got 403 error (denied access) for direct download of:
http://localhost/sites/default/files/myprivatefile.jpg
This modules generates a url for users who have permission, like this:
http://localhost/private/6/field-test/myprivatefile.jpg
And i couldn't download as anonymous, but i could as a user who has permission.

So it's working good with node access ;)

andreiashu’s picture

Status: Active » Closed (works as designed)

Hi Carvalhar,

Yes, you are right, so basically the way this module works is by node access permissions: if one has access to a node (as authenticated or anonymous) it will have access to the attached files of that node as well. If not, then one should get an access denied. Otherwise this is a bug :)

So, did I understand correctly that everything is working fine for you now?

Cheers,
Andrei

charlie-s’s picture

@carvalhar - You don't find that in your situation all files in /files/ are being restricted for anonymous users?

charlie-s’s picture

Issue summary: View changes

typo