When you generate a new content type with CCK you get a bunch of columns the first two of which are nid and vid. Obviously I cannot upload these from a CSV file in any safe way I can think of, e.g. they also need to be in other tables. I only need to generate about 100 rows so I could just sit here playing dump automaton and create a bunch of empty nodes of the new type. This would not be tenable if there were thousands of nodes.
set the "files" folder to be not accessible over the web and
force all downloads to go through system/files which is served by system.module's file_download() . The combination of these gives the possibility of controlling access to downloads by role.
This feature is presented to admin as a site-wide feature - however there is no site-wide mechanism for enforcing
privacy.
upload.module enforces "view uploaded files" permission by role for files that it knows about
imce.module completely breaks this mechanism by granting access to uploaded files without checking permissions
Now - you could say that imce.module has a bug in it. It "should" check permissions. But if the meaning of "private" is determined on a contrib module by contrib module basis - there will be a profusion of permissions which may contradict each other.
My conclusion is that the access permissions for a site-wide a private filesystem should not have been left up to imce.module in the first place.
System.module serves up the private files. It provides the a simple place to enforce access control by role for private files.
Hello. I am printing print $scripts inside of my header of my page.tpl.php.
However, it is empty while logged out and fine when logged in. This file should print all of the js files I need to operate correctly such as jQuery.js for example.
I traced this variable back to the function drupal_get_js Is there something I need to do to get this to perfecm the same way regardless of being logged in or logged out. Any help is greatly appreciated.