Tagged: media attachments
- This topic has 11 replies, 2 voices, and was last updated 8 years, 2 months ago by Syam Mohan.
-
AuthorPosts
-
October 3, 2016 at 9:46 am #39552David Stein DesignSpectator
hi Syam – is there a way to restrict files in the media library to only logged in users, in a similar way that Posts / Pages extended permissions has the Role Permission check boxes? Is it possible to set Role permissions for files in the media library? I thought that the extended posts / pages permissions would do that but even if I restrict a page or post, any of the media files linked to from that page are not blocked.
I’m trying to make certain images only view-able to logged in users.
I looked into the Media Attachment File Permissions, thinking that might do it but I only found the option to enable users of certain roles to upload / delete media library files.
Would the “read others attachments” option be what I would set for that? The documentation that says,
read_others_attachments
This capability is required to view files which are uploaded by others within the media library. Remove this capability to give a user access to only his/her own files.
makes me think that it would do what i want to accomplish, but i have that unchecked for several user roles and when logged in, those users are able to view the content, even if it’s an image they didn’t upload.
Am I misunderstanding what this does?
thanks, david
October 3, 2016 at 1:24 pm #39556David Stein DesignSpectatorThis reply has been marked as private.October 3, 2016 at 1:51 pm #39560David Stein DesignSpectatorThis reply has been marked as private.October 3, 2016 at 9:53 pm #39575Syam MohanKeymasterHi David,
Extended permissions doesn’t limit the user from accessing the attachments uploaded to a post/page. This plugin does have ‘Media File Permissions’, as you have already seen, however it doesn’t limit anyone from accessing that resource directly by typing the URL to that attachment. That functionality requires URL rewrite, and has nothing to do with WordPress. Its a web server feature and will have to be implemented separately against each server type. Apache, Nginx, etc. So its not as straight forward as limiting posts or pages. I do have a to do item for this feature, but its feasibility needs to be tested. ‘Media File Permissions’ is more useful in the backend, like if you don’t want users to edit or delete other users attachments/files.
Thanks
Syam
October 3, 2016 at 11:03 pm #39579David Stein DesignSpectatorThanks Syam, appreciate the thorough response!
October 3, 2016 at 11:26 pm #39581David Stein DesignSpectatorThis reply has been marked as private.October 4, 2016 at 4:50 pm #39624David Stein DesignSpectatorThis reply has been marked as private.October 6, 2016 at 10:06 pm #39732Syam MohanKeymasterThis reply has been marked as private.October 8, 2016 at 11:23 pm #39871David Stein DesignSpectatorThis reply has been marked as private.October 18, 2016 at 9:17 pm #40391Syam MohanKeymasterThis reply has been marked as private.October 18, 2016 at 9:24 pm #40393David Stein DesignSpectatorThis reply has been marked as private.October 18, 2016 at 9:35 pm #40395Syam MohanKeymasterThis reply has been marked as private. -
AuthorPosts
- The topic ‘Extended Media Library Permissions?’ is closed to new replies.