Master Download URL allows for anyone to download

Viewing 4 posts - 1 through 4 (of 4 total)
#201820

Brendan Parker
Participant

As I’m setting this up on a site, I notice that I can restrict a file from being viewed and downloaded through the app by telling it which account types (Editor, Document Viewer) can view it. That works. But I also notice that in the file list, it gives us a Master Download URL which I can use to access the file. Great! However, when I’m logged out, I put the Master URL into the browser and I get direct access to the file. I want to prevent this. How can I disable this, and let only the people who are logged in with the proper accounts access it?

#201827

Nayeem Riddhi
Moderator

Hello Brendan Parker,

Hope you are well. You are doing Master Download Link, it will do so, it bypasses the restriction and does direct download. You can use [download_link] template tag for normal restricted downloads of files. Please kindly check and let me know.

Thank you and kind regards

#201865

Brendan Parker
Participant

So if I understand correctly, a person can access the files if they have the master download link, regardless of login status? I’d really like to make it so non-members cannot access the file at all.

#201875

Nayeem Riddhi
Moderator

Yes, Master Download Link bypasses the restriction and does direct download. Please kindly check and let me know.

Thank you and regards

Viewing 4 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.