Drupal's "private file system path" [#2634254]

Curious, with this module do I need to have my images in Drupal's private file system path?

Use case:
I'm allowing my users to create a private album where they can share the pictures in their protected_node with the correct password.

Or is Drupal's private file system path for protecting against direct directory hacking? In which case I can understand wanting to keep using the private directory.

Thanks, and great module!

Comments

Comment #1

13 December 2015 at 18:05

System Lord created an issue. See original summary.

Comment #2

Grimreaper

French

France 🇫🇷

CreditAttribution: Grimreaper as a volunteer commented 13 December 2015 at 18:15

Hello,

There is a support for the private file system.

If you protect a node but the images or attachments are managed with the public file system. If a visitor has the URL he/she will be able to see it.

So you will still need to use the private file system.

Is it ok for you?

Comment #3

System Lord CreditAttribution: System Lord commented 13 December 2015 at 18:35

Yep. Just tested that and you are correct. If a person has the image URL they WILL be able to see the image. Regardless if I'm using protected_node. This is true even if it's an anonymous user. (This is if I use the Public file system.) Good to know!

Thanks!