💾 Archived View for chirale.org › 2008-09-04_177.gmi captured on 2024-08-31 at 11:56:05. Gemini links have been rewritten to link to archived content

-=-=-=-=-=-=-

Private uploads and restricted access on Drupal

Tested on: Drupal x

Scenario: you have some content types with some attachments you want to protect or restrict to certain users (e.g. authenticated vs. anonymous).

Private Upload is the right module to do the job. According to starbow, “the files are only as private as the nodes they are attached to“. In other words, Private Upload inherits the access restrictions from the “parent” node.

Private Upload

the files are only as private as the nodes they are attached to

After you flag an attached file as “private”, it will be publicly downloadable by anonymous users if “parent” node is available to anonymous users. But if that node is available only to authenticated users, as anonymous you’ll get a “403: Forbidden” error if you try to download it.

If you want a tailored solution beyond standard access control provided by Core modules, you can combine Private Upload with other node access control modules:

Node Access restrict by node
Content Access restrict by content type

I use both on different websites. Remember: Private Uploads inherits access restriction from parent node, so using these module you can automatically allow or deny to specific user roles to dowload the attachment on specific nodes (node by node with Node Access, globally for a content type with Content Access). But remember to flag each attachment as private!

https://web.archive.org/web/20080904000000*/http://drupal.org/project/private_upload

https://web.archive.org/web/20080904000000*/http://drupal.org/node/295557#comment-969165

https://web.archive.org/web/20080904000000*/http://drupal.org/project/node_access_control

https://web.archive.org/web/20080904000000*/http://drupal.org/project/content_access