I have check in "Global file access overrides" all roles and in "Control access per node" i have checked "Force access check per node" When i edit any node an assing other file access, diferent of the global, and i save de node the file access check all roles as the permissions of the "Global file access overrides".

CommentFileSizeAuthor
#4 protected_extns.png23.48 KBmattman

Comments

mattman’s picture

mattman commented
Priority: Critical » Minor

When you say you've checked all roles in the "Global access" in the admin settings, this means all roles will be able to access all files.

There's not point to using File Access if you check all roles to have global access because then everyone will be able to access all files.

The point of the Global Access settings is to allow for an "All content access pass" type of role. Otherwise, you'll just set the role which should have access to the file on the node where the file is stored.

Does this help out?

marklein’s picture

marklein commented

I check all the roles in "global access" because when I upload an image from the tinytiny MCE editor, the users can not see it if not checked her role in "global access".

I need a solution!!

Thanks in advance.

marklein’s picture

marklein commented

I need help!!

mattman’s picture

mattman commented
StatusFileSize
new protected_extns.png23.48 KB

Ok, I know what is going on. File Access is blocking access to all files handled by Drupal. This is fixed in the most recent code in CVS. This is not fixed in the download version. Are you using the downloaded copy from Drupal or are you getting the module via CVS?

Attached is an image of how you would protect only those files you want protected. For example. In my use I only protect files like .mov .mp4 .mp4 and NOT .gif .png

mattman’s picture

mattman commented

I've updated the 6.x.1 dev branch so you'll be able to download the version from Drupal.org with the fixes. You may need to wait until it says July 23 on the development snapshot. If it says something earlier then it won't have the fixes.

marklein’s picture

marklein commented

Thank you very much! Currently solves the problem but not the final solution. And congratulate a great job.

mattman’s picture

mattman commented
Status: Active » Postponed

True, if your goal is to block access to images served by Drual and you want certain users to be able to see them when they upload then you'll need to wait until I get a UI in for managing user based file access. This would allow you to set access to the users who upload but block access for other users.

I've set it to postponed until I find the time to get the UI work done.

ravencoder’s picture

ravencoder commented

Hi,

Is there any updates for the UI in managing user-based file access?

That would allow access to users who only uploaded the file. In my case, I am working on a "job search" site and I want to restrict my job seekers' uploaded resume files to be access by other users. Is there a way I can do this using the API of the current existing version of the module?

Thanks