Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.This project is not covered by Drupal’s security advisory policy.
File access is simply designed to deny or approve access to individual files when using Drupal’s private download method. See ‘background’ below for more information. Requires PHP5 because of some functions.
sponsored by GotDrupal.com,
designed by Matt Petrowsky
Requirements
- PHP5 required due to some functions
- Using either Upload, Filefield or both
- Setting File system settings to ‘private’
Feature list:
- Support for Upload and Filefield files
- Role access controls for individual files
- User per-file access (currently via api only)
- Global access settings for individual roles (eventually users too)
- Optional ‘per node’ access enforcement (more of a feature for Drupal 7 - but works now)
- No-access redirection to any path
Planned features:
- Support for Ubercart integration (purchasing file access)
- Support for Views integration (think per-user-access file listings)
- Support for User Points integration (digital wallets, etc.)
Background
Drupal offers file delivery through one of two methods (although there are modules which will allow you to use the two at the same time), either “public” or “private” are your options, which are not very descriptive. Public simply means Drupal will hand off the file request to the web server. There are no access checks unless specifically added at the web server level.
Drupal’s “private” method of file delivery passes the file through PHP. This is where Drupal provides a limited degree of “programability”. Since files (as of Drupal 6) are not ‘first class citizens’ in how Drupal deals with the download, you can only do so much. Fortunately, there is enough to make specific file access possible.
Status
This module is in Alpha stage, but is a functioning module. Bug reports are appreciated. The module is lacking any UI for controlling user-specific file access on each node, but the api for checking access is there.
The UI also requires the node to be submitted before file access controls will show for files. This is planned to be changed, but for now, the module is functional.
Project information
Minimally maintained
Maintainers monitor issues, but fast responses are not guaranteed.- Module categories: Media
56 sites report using this module- Created by mattman on , updated
This project is not covered by the security advisory policy.
Use at your own risk! It may have publicly disclosed vulnerabilities.
