Jump to:

23450 Posts in 18899 Topics by 2877 members

General Questions

SilverStripe Forums » General Questions » File Download Security

General questions about getting started with SilverStripe that don't fit in any of the categories above.

Moderators: martimiz, Sean, biapar, Willr, Ingo, swaiba, simon_w

Page: 1
Go to End
Author Topic: 1185 Views
  • Eddie Stevens
    Avatar
    Community Member
    2 Posts

    File Download Security Link to this post

    It is great that SilverStripe can restrict access to individual pages based on group membership, but is there any way to restrict access to files based on group membership? For example, I would like to have a Members Only section for my organization. On that page I would like to put a link to a membership roster that is in PDF format. I know I can restrict access to the page that has the link, but if someone types in the URL for the attachment directly they will have immediate access to the file. Is there a way to control access?

  • lerni
    Avatar
    Community Member
    80 Posts
  • DoubleBass
    Avatar
    Community Member
    1 Post

    Re: File Download Security Link to this post

    Wouldn't it be easier just to use .htaccess file and use Basic authentication? What is the additional benefit from using silverstripe Users?
    Thanks!

  • Eddie Stevens
    Avatar
    Community Member
    2 Posts

    Re: File Download Security Link to this post

    With .htaccss you would have to maintain two user databases; in my case I am dealing with about a hundred users broken up into five groups. Each group needs access to different files. Maintaining .htaccess accounts and SilverStripe accounts for all users would be a nightmare.

    1185 Views
Page: 1
Go to Top

Want to know more about the company that brought you SilverStripe? Then check out SilverStripe.com

Comments on this website? Please give feedback.