Restricting access to uploaded files in Advanced Forum

Posted by thormongous on December 7, 2012 at 6:52pm

We want to put Advanced Forum in a members only section of a site. What can we do to ensure the files uploaded to the forum require login to view those files? We don't want those files to be accessible via a direct link.

In other words, if someone uploaded a pdf document to a forum post and then he were to give out a link to that file to someone else, that person would be required to login first before viewing the file.

What needs to be done to accomplish this?

Thanks in advance.

Comments

Hi there, If you have gone

Posted by johnmcgov on December 10, 2012 at 6:40am

Hi there,

If you have gone this far already than please ignore. I think this link may at least be a start in the right direction:

http://drupal.org/documentation/modules/file

Scroll down to the "Managing File Locations and Access" section. You will post likely want to use the features in yoursite.com/admin/config/media/file-system (D7) to lock down those files so Apache will not serve the files out directly. From there you can use a module like Content Access or something more specific to Advanced Forum to make sure that only certain user roles have access to that content and those files stored in Drupal's private file system.

Hope this helps!

John

Thanks John

Posted by thormongous on December 11, 2012 at 4:27pm

Our consultant figured it out and said the files will be uploaded to a protected directory and all should be good.

What I failed to stress was that this was in reference to files being uploaded/linked in the content area of the form (using CKEditor) and not a file upload form.

Thanks for the information John.