Title: [Plugin: Group Documents] Authenticate before download
Last modified: August 20, 2016

---

# [Plugin: Group Documents] Authenticate before download

 *  Resolved [sanderbontje](https://wordpress.org/support/users/sanderbontje/)
 * (@sanderbontje)
 * [14 years, 7 months ago](https://wordpress.org/support/topic/plugin-group-documents-authenticate-before-download/)
 * First of all, thanks for all your work! This plugin would really suit our needs
   for handling documents in our community’s site. But one small thing is keeping
   us from using it: the way documents are unprotected.
 * I’ve created new public, private and hidden groups and uploaded documents to 
   all of them.
    The link to any document (although somewhat obfuscated) can be 
   used by any user to get access to that document. All he needs to do is guess 
   the correct url. There is no need to log in to proof group membership.
 * I know a question similar to this came up [earlier](http://wordpress.org/support/topic/plugin-group-documents-restrictions-on-downloads?replies=2),
   but that topic has been closed. Any news on the subject?
 * Thanks 🙂
 * [http://wordpress.org/extend/plugins/buddypress-group-documents/](http://wordpress.org/extend/plugins/buddypress-group-documents/)

Viewing 1 replies (of 1 total)

 *  Thread Starter [sanderbontje](https://wordpress.org/support/users/sanderbontje/)
 * (@sanderbontje)
 * [14 years, 4 months ago](https://wordpress.org/support/topic/plugin-group-documents-authenticate-before-download/#post-2351484)
 * This code on the link below was just what I needed. It allows the group-documents
   folder that you use to store your files to be be placed outside your DocumentRoot.
   It adds an extra security layer that filters the requests throught BP and checks
   whether the visitor is logged in and has access to the file.
 * [http://dev.commons.gc.cuny.edu/2011/02/05/hardening-buddypress-group-documents/](http://dev.commons.gc.cuny.edu/2011/02/05/hardening-buddypress-group-documents/)
 * Task “User verification for Downloads” from roadmap.txt completed. 🙂

Viewing 1 replies (of 1 total)

The topic ‘[Plugin: Group Documents] Authenticate before download’ is closed to 
new replies.

 * ![](https://s.w.org/plugins/geopattern-icon/buddypress-group-documents.svg)
 * [Group Documents](https://wordpress.org/plugins/buddypress-group-documents/)
 * [Support Threads](https://wordpress.org/support/plugin/buddypress-group-documents/)
 * [Active Topics](https://wordpress.org/support/plugin/buddypress-group-documents/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/buddypress-group-documents/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/buddypress-group-documents/reviews/)

## Tags

 * [link](https://wordpress.org/support/topic-tag/link/)

 * 1 reply
 * 1 participant
 * Last reply from: [sanderbontje](https://wordpress.org/support/users/sanderbontje/)
 * Last activity: [14 years, 4 months ago](https://wordpress.org/support/topic/plugin-group-documents-authenticate-before-download/#post-2351484)
 * Status: resolved