[support] Applying drupal access control to PDF documents.

[Gordon Heydon]

Hi,

It all depends on how the access to the actual files are configured. If 
you use private downloads to access the files, then the access to the 
node is checked, otherwise if you are using public downloads the access 
is not checked.

With the standard setup of drupal you cannot have both implemented, but 
you can use the private upload module to force selected files to be 
private files.

Gordon.

Roy Smith wrote:
> I've been using the Nodeaccess (5.x-1.x-dev) module to control access to 
> a "members only" section of my web site.  I want to put some PDF 
> documents on the site, which will be subject to the same access control, 
> but I don't see any way to do this.
> 
> I can upload the PDFs to the files directory, and link to them from a 
> protected page, but that doesn't really protect the PDFs.  Anybody who 
> could guess a URL would have unlimited access.  I know I can add 
> .htaccess protection at the apache level to the PDF's, but that means 
> people need to authenticate twice (once to drupal, again to apache). 
>  And, managing two sets of accounts would be a nightmare.
> 
> Is there some way to embed a PDF directly as a drupal node, so I can 
> control access to it via the same mechanism as the rest of the site?
> 
> 
> --
> 
> roy at panix.com <mailto:roy at panix.com>
> 
> 
> !DSPAM:1000,479cb1ea290334455618576!
>