Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationDocument authenticationDocument authentication
Previous
 
Next
New Post
7/2/2008 7:57 PM
 

How can i authenticate users to view documents (Word and PDF) ...As an example, when a user enters www.test.com/documentation/IT/Default.aspx in a browser, he goes to the log in page. However when a user enters www.test.com/documentation/IT/Portals/0/test.pdf , he can view the document without entering the credentials. How can i make the user to log in before they can view the document? I believe that the first URL www.test.com/documentation/IT/Default.aspx is going through the Default.aspx and hence a check is made if a user is registered or not...However the second URL does not hit the default.aspx page and hence they can view the document (I might be wrong..That is just my guess) . How can i force the users to log in before viewing a PDF document? Thanks in advance!!

 
New Post
7/2/2008 9:51 PM
 

You can do this two ways.  First, you can change the folder through the Admin Menu > File Manager to only allows specific Roles to have view permissions.  Second, you can create a new folder to be a Database Folder.  This way, the visitor is pushed through the .Net processes no matter what.  However, this will increase your database size greatly, and includes a perf0rmance hit.


Will Strohl

Upendo Ventures Upendo Ventures
DNN experts since 2003
Official provider of the Hotcakes Commerce Cloud and SLA support
 
New Post
7/3/2008 12:49 AM
 

I've never tried locking down a file in DNN except through page roles so I'm taking a WAG here but I don't think the first way will make a difference Will as the user is bypassing the website and going straight to the document itself (the website isn't even loaded). That's been the bane of putting files out on the internet since, well, forever. The second idea sounds like it has merit as the file is actually stored in the database instead of on the server as an actual file.

Another option would be to use something like the Repository. When a file is uploaded through the Repository it gets a hash code added to it specifically so that a user has to go through the module to see the file. Then you could set roles on the module that can view it.

 
New Post
7/3/2008 8:15 AM
 

Mike, while I may be very wrong, I thought that since 4.4 (I might have the version wrong) that DNN intercepts the file request and prevents access to protected directories.  (Don't ask me how - it confused me.)  This was a change that broke many modules (even the Documents Module) which gave access to files.  This process too would add a "fileTicket" url querystring value to a masked URL.

Does that sound familiar?


Will Strohl

Upendo Ventures Upendo Ventures
DNN experts since 2003
Official provider of the Hotcakes Commerce Cloud and SLA support
 
New Post
7/3/2008 11:57 AM
 

I tried the second option - Creating a database folder... The question i had was, how do i give reference to those documents? If it is a file system I can edit the page to point to whatever location i want to (Ex - Portals/0/documentation/IT.PDF)...but since it is a database folder, the file system reference is not going to work...how will i reference those database files then? Thanks in advance

 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationDocument authenticationDocument authentication


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out