Hi,
I'm wondering if anyone has experience of this and can point me in the right direction.

I have created some pages which show to certain members of a website when they log in:

these pages list documents which are for their eyes only.

Using the advanced permissions I can secure the PAGES fine - each person can only log into their own page to see the list of documents.

However, this does not stop just anyone being able to download the documents if they have the URL.

Sure, the path to the documents is fairly tortuous but (as pointed out by my client) the documents are not secure.

Anyone done this? Any ideas on approach?

thanks,

Andy