| User | Post |
|
9:51 am
May 20, 2010
|
bigfuzz
Member
| | | |
|
| posts 3 |
|
|
This is a great plug-in!
I'm finding that a PDF file that is attached to a page can still be accessed thru the direct URL.
I have gone thru quite a few of the posts here and tried a bunch of solutions with the same result.
Access to the page is working like a champ.
I have no errors in the File Filtering options
I used the attachment utility
I manually tried removing the http://www.domain.com/ from the attachment URL within the page
I AM using non-default permalinks (Month / Day)
|
|
|
10:00 am
May 20, 2010
|
Kevin
Admin
| | | |
|
| posts 1385 |
|
|
What WP version are you running?
|
|
|
10:32 am
May 20, 2010
|
bigfuzz
Member
| | | |
|
| posts 3 |
|
|
|
7:56 pm
May 20, 2010
|
nes49
Member
| | | |
|
| posts 10 |
|
|
Yes, I'm also having problems with file filtering.
I've got a fresh install of WP 2.9.2. Role Scoper 1.1.7 is the only activated plugin.
I checked the option Roles > Options > Features > File Filtering before uploading a file to a protected post. The html/wp-content/uploads directory is open for browsing and that file, in particular can be accessed by it's URL.
There is only one .htaccess file — in the document root. The Role Scoper lines are
# BEGIN Role Scoper
RewriteEngine On
RewriteCond %{HTTP:Authorization} ^(.*)
RewriteRule ^(.*) - [E=HTTP_AUTHORIZATION:%1]
# END Role Scoper
You can see the test site at
http://wptest.sgtst.com/
The anonymous user can browse http://wptest.sgtst.com/wp-content/uploads/
There are three "hidden" posts — login as user/user123 to see them and the links to the files that should be private.
If you want admin access to the test system, just let me know.
|
|
|
5:24 am
May 21, 2010
|
Kevin
Admin
| | | |
|
| posts 1385 |
|
|
Anyone experiencing problems with File Filtering should install Role Scoper 1.2 Beta 2. It includes the following fixes:
- BugFix : File Filtering did not work on WP 3.0 Multisite
- BugFix : File Filtering did not work on new MU blogs until plugin re-activation or File Filtering re-enable
- BugFix : If redundant Page / Post / Category roles were stored to database, they could only be deleted one at a time (giving the appearance and effect of a failed role deletion)
|
|
|
9:14 am
May 21, 2010
|
nes49
Member
| | | |
|
| posts 10 |
|
|
Deactivated 1.1.7
Installed 1.2Beta2 and Reactivated
- Still able to browse uploads folder
- No Rolescoper info in the html/.htaccess file and that's the only .htaccess file on the site
In Roles > Options > Features - disabled and re-enabled file filtering
Added "Private Post #4″, set it to visible only to logged-in users, uploaded a file and put a link to the file in the post
- New post isn't visible to the anonymous user
- It's still possible for anonymous user to browse the uploads folder, but
- Trying to access the protected files generates a 404
- The RoleScoper info does appear in html/wp-content/uploads/.htaccess (I expect that appeared after the disable/re-enable file filtering — I didn't run a full test.)
I'm in awe at your work.
Any suggestions on whether 1.2Beta2 should be used on a production site, or when you expect the final release to be ready?
|
|
|
9:40 am
May 21, 2010
|
bigfuzz
Member
| | | |
|
| posts 3 |
|
|
I was able to get the File Filtering working with the updated plugin.
I uploaded a couple new files to test it out.
When adding a file/media, I made sure to chop off the http://www.domainname.com from the location ~ that might be the trick.
Works like a champ!!
|
|
|
4:32 pm
May 29, 2010
|
nes49
Member
| | | |
|
| posts 10 |
|
|
I still can't get this working on my production site.
I've reconfigured that site so that WordPress and Blog Urls are the same (i.e. the WordPress files are in the document root, not down in a subdirectory).
Installed Role-Scoper 1.2Beta3
File filtering isn't working when I upload a file and insert it into a post in a category that is visible only to logged in users. I've tried running the file attachment utility as well. The only Role Scoper lines in docroot/.htaccess or docroot/wp-content/uploads/.htaccess are
# BEGIN Role Scoper
# END Role Scoper
in the uploads' .htaccess
And in the test environment I created above, I saw the role scoper options on the Edit screen. Those aren't appeaering in my production environmenet (WP 2.9.2).
|
|
|
4:48 pm
May 29, 2010
|
Kevin
Admin
| | | |
|
| posts 1385 |
|
|
What do you mean by RS Options appearing on the Edit Screen? If the role metaboxes are not showing in the Post/Page Edit Form, check Roles > Options > Realm and make sure your "Term Scope", "Object Scope" and "Access Types" are activated appropriately.
|
|
Login
Register
Search 
Forums
Topic RSS 