[Plugin: User Access Manager] File access not restricted

  • RealPython.com

    (@realpythoncom)


    13 years, 8 months ago

    I am trying to restrict the download of certain files to a custom user role that I created through Advanced Access Manager. The page that links to the files is being hidden/restricted correctly, but the files (which were automatically marked to have restricted access when I inserted them into the page) are not protected and can be downloaded by anyone with the address. I created the protected page and uploaded the files after installing UAM. I’ve tried both ‘regular’ and fopen modes.

    I thought that it had correctly restricted the files before, but perhaps my .htaccess is automatically getting overwritten? I’m also using Better WP Security.

    http://ww.wp.xz.cn/extend/plugins/user-access-manager/

Viewing 1 replies (of 1 total)
  • Thread Starter RealPython.com

    (@realpythoncom)

    13 years, 8 months ago

    I’ve done a bit more investigating – it looks like any file is properly restricted to a certain role *until* a single registered user downloads it, then it becomes available to anyone via the URL. The .htaccess and .htpasswd files for the uploaded content don’t change, so it’s a mystery how permissions could be changing in this way.

Viewing 1 replies (of 1 total)

The topic ‘[Plugin: User Access Manager] File access not restricted’ is closed to new replies.