Currently I am working on a multidomain setup for a government project and also on an intranet solution which should be offered as a distribution and in a lot environments there´s the need for a more detailed access control managment for the media assets.

a) One first step solution would be the possibility to set folder access permissions, of course all childs (folders & media-items) must inherit these permissions or permissions based on the user role.

Cause folders are taxonomy based, would this already be possible with Taxonomy access?

b) For the "intranet"-solution which should contain a project managment solution it´s more complex.
User should have different roles depending on their position in the project, therefore the permissions could not be set with the default roles system.

------
There already an issue with own uploaded media here: http://drupal.org/node/992978
There should be a permission to allow users to edit only media they have uploaded (at media/[fid]/edit). Currently, there is only the "edit media" permission, which allows a user to edit any media on the site.

The attached patch adds an 'edit own media' permission, updates media_access() to check the new permission, and updates the media/%media/edit access arguments to pass a media object.
------

If somehow possible, depends on the costs, I would like to sponsor this request as a project or add on.
Please send me a PM if you have an offer. There´s also a 2nd media thing I need for the intranet asset management which maybe could be done together with this.

Comments

TonyxTony’s picture

Hey there, have you found a solution to this?

drupal a11y’s picture

Partly. Most was custom work with views, rules, taxonomies etc.

Some modules good for these kind of requirements:
https://drupal.org/project/content_access
https://drupal.org/project/flexiaccess
https://drupal.org/project/taxonomy_access

https://drupal.org/project/workflow
https://drupal.org/project/maestro

Also check out the latest dev of Open Atrium 2, there are also some good hints & inspirations for managing access.

TonyxTony’s picture

thanks alot, will take a look into this

Devin Carlson’s picture

Status: Active » Closed (works as designed)

Media doesn't care about folder structure. :)
One of its primary use cases is to manage remote media and files stored in cloud storage, which have no concept of folders.

I'd suggest looking into filedepot.

drupal a11y’s picture

Just forgot the main module for managing folders: https://drupal.org/project/media_browser_plus

drupal a11y’s picture

And another module I found which looks promising, haven´t tested it yet: https://drupal.org/project/media_filepickerio

drupal a11y’s picture

Found a new module -> https://drupal.org/project/file_access

ile access is simply designed to deny or approve access to individual files when using Drupal’s private download method. See ‘background’ below for more information. Requires PHP5 because of some functions.

Requirements
PHP5 required due to some functions
Using either Upload, Filefield or both
Setting File system settings to ‘private’

Feature list:
Support for Upload and Filefield files
Role access controls for individual files
User per-file access (currently via api only)
Global access settings for individual roles (eventually users too)
Optional ‘per node’ access enforcement (more of a feature for Drupal 7 - but works now)
No-access redirection to any path

Planned features:
Support for Ubercart integration (purchasing file access)
Support for Views integration (think per-user-access file listings)
Support for User Points integration (digital wallets, etc.)