Hi!

Using Role Scoper to restrict access for pages works great. But associated files (like jpeg, pdf) are still downloadable for everyone without having to log in (if you know the link in the uploads directory). 

I checked the "Filter Uploaded File Attachments" box and the attachment utility reports "Attachment OK" for the files. 

Am I missing something. Or does it not work yet? 

With  1.1.8.dev.D I get the same result.

Any Help would be very welcome.

Thanks in advance

Michael

Kevin,

Just checking out RS for first time, evaluating for use.  Looks very well-featured and developed so I'm hopeful it will work for us. If we end up using it we will definitely contribute via Paypal, and would consider paid support if you decide to offer it.

The issue I'm having is similar to what is mentioned in the post above.  When I restrict a post (using category) the restriction seems to work great for the post but not for attached files.  I can go direct to the attachment URL from any browser (different computer, not logged in) and get the attachment.

We have Wordpress installed in its own directory (e.g. http://mysite.com/wordpress/) with the "site address (URL)" setting omitting the extra directory path (http://mysite.com).  This has worked for everything so far.  

Other than that we are pretty standard config.  We are on version 3.1 and I installed the current RS version 1.3.28.  

I've uploaded 2 attachments while in the post, one a jpg and one zip.  I also inserted into the post (not just attached) and confirmed in the gallery that they show as attached to that post.  When I run the attachments utility I get:

Operation complete: 2 linked uploads were found in your post / page content.
All linked uploads are already registered as attachments.

It shows the jpg twice, once the jpg I uploaded to the gallery and then the one inserted (it got resized) as "OK in post…" but does not show the zip file at all.  When I try the URL direct to the jpg (with or without resize) and to the zip file, no restriction is applied.

It appears we do allow directory browsing on the /uploads/ directory, which may affect things.  I don't see any .htaccess in the /uploads/ directory.

I appreciate any suggestions or references for troubleshooting you can offer.  In order for us to use the plugin we need to be able to secure file attachments in addition to posts and pages, so hopefully we can get it to work.  

Thanks,

Ted

Thanks for the response.  I have toggled on/off and will try another attachment.  Any idea why it does not seem to see the .zip file at all?  Is that by design?