J N,

you have to set the permissions for that folder. Anyway, if the folder is not marked as "Secure" or "Database", anyone can still access it by entering the the exact Url of this file, this would propably be something like www.mysite.com/Portals/0/SomeFiles/AnImage.jpg.

When the file is in a secure or database folder, a file handler is needed (included in DNN) that checks the folder permissions. so the Url to that file would be something like www.mysite.com/LinkClick.aspx?fileticket=BsWxIL6KV5A%3d&portalid=0&language=en-US

Happy DNNing!
Michael

JN,

SSL is not necessary to access "Secure" folders. Files in these folders get an extra extension (".resources") that IIS does not deliver directly, so you don't have a chance to access it directly by www.mydomain/Portals/0/SomeFiles/AnImage.jpg.resources. DNN uses a handler (LinkClick.aspx) to get the file and deliver it to the browser.

I don't know which HTML provider you are using, so I can't tell you about the issue. If you are using the Telerik editor, try switching to CK Editor.

Host has the most elevated permissions in a DNN system. This does not work like Windows UAC :-)

The place to upload files using the HTML editor can be set by the user who uploads them (but of course, they need write permissions there). Therefore if you give them write permissions only to secure folders, they can't upload anywhere else. I don't know of any other way.

Happy DNNing!
Michael