Applying drupal access control to PDF documents.
I've been using the Nodeaccess (5.x-1.x-dev) module to control access to a "members only" section of my web site. I want to put some PDF documents on the site, which will be subject to the same access control, but I don't see any way to do this. I can upload the PDFs to the files directory, and link to them from a protected page, but that doesn't really protect the PDFs. Anybody who could guess a URL would have unlimited access. I know I can add .htaccess protection at the apache level to the PDF's, but that means people need to authenticate twice (once to drupal, again to apache). And, managing two sets of accounts would be a nightmare. Is there some way to embed a PDF directly as a drupal node, so I can control access to it via the same mechanism as the rest of the site? -- roy@panix.com
On Sunday, January 27 2008 8:27:56 am Roy Smith wrote:
I've been using the Nodeaccess (5.x-1.x-dev) module to control access to a "members only" section of my web site. I want to put some PDF documents on the site, which will be subject to the same access control, but I don't see any way to do this.
I can upload the PDFs to the files directory, and link to them from a protected page, but that doesn't really protect the PDFs. Anybody who could guess a URL would have unlimited access. I know I can add .htaccess protection at the apache level to the PDF's, but that means people need to authenticate twice (once to drupal, again to apache). And, managing two sets of accounts would be a nightmare.
Is there some way to embed a PDF directly as a drupal node, so I can control access to it via the same mechanism as the rest of the site?
-- roy@panix.com
I only skimmed it, so I may be wrong, but it seems this article might address what you need: http://drupal.org/node/156547 -- Jason Flatt http://www.oadaeh.net/ Father of Six: http://www.flattfamily.com/ (Joseph, 14; Cramer, 12; Travis, 10; Angela; Harry, 7; and William, 12:04 am, 12-29-2005) Linux User: http://www.xubuntu.org/ Drupal Fanatic: http://drupal.org/
On Jan 27, 2008, at 3:44 PM, Jason Flatt wrote:
On Sunday, January 27 2008 8:27:56 am Roy Smith wrote:
I've been using the Nodeaccess (5.x-1.x-dev) module to control access to a "members only" section of my web site. I want to put some PDF documents on the site, which will be subject to the same access control, but I don't see any way to do this.
I can upload the PDFs to the files directory, and link to them from a protected page, but that doesn't really protect the PDFs. Anybody who could guess a URL would have unlimited access. I know I can add .htaccess protection at the apache level to the PDF's, but that means people need to authenticate twice (once to drupal, again to apache). And, managing two sets of accounts would be a nightmare.
Is there some way to embed a PDF directly as a drupal node, so I can control access to it via the same mechanism as the rest of the site?
-- roy@panix.com
I only skimmed it, so I may be wrong, but it seems this article might address what you need: http://drupal.org/node/156547
Yeah, that looks pretty close. The only hitch I can see is that I'm using a web hosting service, so I don't have direct control over the apache server. I need to find out if they're running mod_auth_sql, or if they can be convinced to install it. Thanks for the pointer!
-- Jason Flatt http://www.oadaeh.net/ Father of Six: http://www.flattfamily.com/ (Joseph, 14; Cramer, 12; Travis, 10; Angela; Harry, 7; and William, 12:04 am, 12-29-2005) Linux User: http://www.xubuntu.org/ Drupal Fanatic: http://drupal.org/ -- [ Drupal support list | http://lists.drupal.org/ ]
-- roy@panix.com
On Jan 27, 2008, at 4:03 PM, Roy Smith wrote:
Yeah, that looks pretty close. The only hitch I can see is that I'm using a web hosting service, so I don't have direct control over the apache server. I need to find out if they're running mod_auth_sql, or if they can be convinced to install it.
Sigh, it turns out they don't support it. Back to the drawing board (or I suppose hunt for a better hosting service). -- roy@panix.com
On Jan 27, 2008, at 5:00 PM, Roy Smith wrote:
On Jan 27, 2008, at 4:03 PM, Roy Smith wrote:
Yeah, that looks pretty close. The only hitch I can see is that I'm using a web hosting service, so I don't have direct control over the apache server. I need to find out if they're running mod_auth_sql, or if they can be convinced to install it.
Sigh, it turns out they don't support it. Back to the drawing board (or I suppose hunt for a better hosting service).
It would seem I left out the third possibility, which is to ask the web hosting company if they would be willing to install mod_auth_sql. They were, they did, and it works great. This is exactly what I was looking for. Thanks! OBTW, I'm using http://u2-web.com/. I'm new to this webhosting game, so I don't have anything to compare them to, but so far they seem very responsive and technically savvy. I'm a happy camper. -- roy@panix.com
Quoting Roy Smith <roy@panix.com>:
On Jan 27, 2008, at 4:03 PM, Roy Smith wrote:
Yeah, that looks pretty close. The only hitch I can see is that I'm using a web hosting service, so I don't have direct control over the apache server. I need to find out if they're running mod_auth_sql, or if they can be convinced to install it.
Sigh, it turns out they don't support it. Back to the drawing board (or I suppose hunt for a better hosting service).
This one http://www.gisol.com/ has a good price with good service if you're going to look. Someone else suggested the host on the list. Earnie -- http://for-my-kids.com/ -- http://give-me-an-offer.com/
Hi, It all depends on how the access to the actual files are configured. If you use private downloads to access the files, then the access to the node is checked, otherwise if you are using public downloads the access is not checked. With the standard setup of drupal you cannot have both implemented, but you can use the private upload module to force selected files to be private files. Gordon. Roy Smith wrote:
I've been using the Nodeaccess (5.x-1.x-dev) module to control access to a "members only" section of my web site. I want to put some PDF documents on the site, which will be subject to the same access control, but I don't see any way to do this.
I can upload the PDFs to the files directory, and link to them from a protected page, but that doesn't really protect the PDFs. Anybody who could guess a URL would have unlimited access. I know I can add .htaccess protection at the apache level to the PDF's, but that means people need to authenticate twice (once to drupal, again to apache). And, managing two sets of accounts would be a nightmare.
Is there some way to embed a PDF directly as a drupal node, so I can control access to it via the same mechanism as the rest of the site?
--
roy@panix.com <mailto:roy@panix.com>
!DSPAM:1000,479cb1ea290334455618576!
participants (4)
-
Earnie Boyd -
Gordon Heydon -
Jason Flatt -
Roy Smith