Resumes are accessible to public

ck9 - June 24, 2009 - 13:15
Project:Job Posting
Version:6.x-1.9
Component:Miscellaneous
Category:support request
Priority:normal
Assigned:Unassigned
Status:closed
Description

Just noticed that all the resumes are being uploaded to sites/default/files/ which is publicly accessible, so could create Data Protection Act issues. How can this be setup so only users with the right permissions can get the resumes through direct links?

#1

gmarus - June 24, 2009 - 15:22

Did you try it with 'Download Method' set to 'Private' at Administer->Site configuration->File system?

#2

ck9 - June 25, 2009 - 00:01

gmarus thanks for your reply. I'm a bit worried by the text "Changing the download method will modify all download paths and may cause unexpected problems on an existing site."

I'll backup the site and try this though, thanks.

#3

gmarus - September 30, 2009 - 17:26
Status:active» closed
 
 

Drupal is a registered trademark of Dries Buytaert.