[support] password protect an upload file

[Shai Gluskin]

Hi Tracey,

1. One, you can password protect the page you download it from using Drupal
page access strategies. That does nothing to the file and the URL created
for the file upon upload will not be protected. So a privileged user could
email the download URL to someone without privileges to access that page but
still get the file anyway via the URL.

2. You can use Drupal's "private file system" which will protect the file
URL as well. In Drupal 6 and earlier you have to decide on private files for
your whole web site. Since people complain about the private files system
(just google "private file system problems site:drupal.org" for more info),
it would be a drag to use the private files system on the whole site unless
that was a major focus of the site.

3. In Drupal 7, Drupal file handling is much improved. You can designate
private files by content type. You don't have to have the files stored on
the same server as the Drupal install, and a lot more. So if you can wait
for Drupal 7, I'd say that is your best bet.

Best,

Shai

On Mon, Mar 22, 2010 at 2:32 PM, Tracey Hummel <thummel at email.arizona.edu>wrote:

> Is there a was to password project a file uploaded through Drupal?
>
> Thanks,
> Tracey
>
>
> --
> Tracey Hummel
> Web Developer
> University Information Technology Services
> Learning Technologies Services
> University of Arizona
> (520) 626-5139
> tracey at uainfo.arizona.edu
>
>
>
>
>
> --
> [ Drupal support list | http://lists.drupal.org/ ]
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.drupal.org/pipermail/support/attachments/20100322/ff8b5a7d/attachment-0001.html