User Access Manager
File access not restricted (2 posts)

  1. RealPython.com
    Posted 3 years ago #

    I am trying to restrict the download of certain files to a custom user role that I created through Advanced Access Manager. The page that links to the files is being hidden/restricted correctly, but the files (which were automatically marked to have restricted access when I inserted them into the page) are not protected and can be downloaded by anyone with the address. I created the protected page and uploaded the files after installing UAM. I've tried both 'regular' and fopen modes.

    I thought that it had correctly restricted the files before, but perhaps my .htaccess is automatically getting overwritten? I'm also using Better WP Security.


  2. RealPython.com
    Posted 3 years ago #

    I've done a bit more investigating - it looks like any file is properly restricted to a certain role *until* a single registered user downloads it, then it becomes available to anyone via the URL. The .htaccess and .htpasswd files for the uploaded content don't change, so it's a mystery how permissions could be changing in this way.

Topic Closed

This topic has been closed to new replies.

About this Plugin

  • User Access Manager
  • Frequently Asked Questions
  • Support Threads
  • Reviews

About this Topic