Just noticed that all the resumes are being uploaded to sites/default/files/ which is publicly accessible, so could create Data Protection Act issues. How can this be setup so only users with the right permissions can get the resumes through direct links?

Comments

gmarus’s picture

gmarus commented

Did you try it with 'Download Method' set to 'Private' at Administer->Site configuration->File system?

ck9’s picture

ck9 commented

gmarus thanks for your reply. I'm a bit worried by the text "Changing the download method will modify all download paths and may cause unexpected problems on an existing site."

I'll backup the site and try this though, thanks.

gmarus’s picture

gmarus commented
Status: Active » Closed (fixed)