Forums

Hiding documents from guests

Permalink
I have a client with a website that is primarily for timeshare owners. There are multiple PDFs on the site that they would like to limit access to only registered users. I can hide the pages from guests, but they can still see documents if they know the URL, so the owner is concerned about that and would like to block PDFs from guests. Is there a way I can do that in Concrete 5.6 ? Do I have to change the permissions for each individual PDF or can I just hide the files from guests?
sketchyTK
 
jasteele12 replied on at Permalink Reply
jasteele12
You could place those files in a File Set and enable Advanced Permissions.

When enabled, file sets may have their own permissions, specifying which users and groups may search, add and edit files within them.

John
sketchyTK replied on at Permalink Reply
sketchyTK
I tried setting a file set for PDFs to Allow Registered Users & Admins, but deny Guests. When I did this registered users could not view the PDFs when the link URL is set to "index.php/download_file/view/71/97/." Also, if I was not logged in, I could still enter the full URL for any PDF into the web browser and view them.
jasteele12 replied on at Permalink Reply
jasteele12
Advanced Permissions are required to restrict access to File Sets. This cannot be reversed once enabled.

If you did have them enabled and set them to registered only for the set and still able to view the PDFs then I would suggest clearing the cache in both concrete5 and your browser.

See the last comment here:
http://www.concrete5.org/community/forums/usage/how-to-restrict-fil...