Extranet and files?

[Hare]

I'm making a website with CMSMS and I'd like to create an extranet for clients.

I know that I can create separate pages that require log-in with frontend users but what if I want to have files on the server that would be downloadable only if the user has proper permissions (in the front end users or some other module). Is it possible to store files with different permissions to achieve this?

I've tried the search and looked at the module repositary but I'm in a bit of a hurry so any help would be very much appreciated.

[calguy1000]

Use the uploads module, the CustomContent module, and FEU to provide that functionality.

Uploads obfuscates the filename to minimize direct downloads (other things can be done too), and CustomContent/FEU can be used to only allow downloading of certain files by groups of authorized users.

[Hare]

Use the uploads module, the CustomContent module, and FEU to provide that functionality.

Uploads obfuscates the filename to minimize direct downloads (other things can be done too), and CustomContent/FEU can be used to only allow downloading of certain files by groups of authorized users.

Thanks. I'll check those out. This extranet is supposed to be administrated by a customer so I'm a bit sceptical about the ease of use if there are many modules involved.

Hopefully there are other options in addition to just obfuscating the filenames since this project needs at least moderate security. No direct downloads should under any circumstance work.

[KO]

I have no experience from this but maybe using .htaccess you could do that. There is possibility to "Prevent Files image/file hotlinking and bandwidth stealing" possibility and maybe that could be answer. But as I said I have no experience from this.

This way only links from "yourdomain" are allowed and those are visible only when logged in.

Would be nice to know if this works.

br, K

[calguy1000]

That would be the answer.  Use the uploads module (besides obfucscating the filenames, it tracks downloads, allows comments and descriptions, etc, etc).  And use a .htaccess file in the appropriate directory to limit any direct links to the files in that directory.

Then it's as simple as putting this type of code into your page template or page content,

Code: Select all

{if isset($customcontent_memberof_groupname)}
{cms_module module='Uploads' mode='summary' category='categoryname'}
{/if}

[Hare]

Thanks.

I'm currently using just htaccess to protect a directory since it turned out that a real extranet for files wasn't needed but I'll definately look more into this.

Thanks for the tips!