[wp-edu] Making media library files private

[Bill Dennen]

This might be worth looking into:

WP Document Revisions
http://wordpress.org/extend/plugins/wp-document-revisions/

"Access Control - Each document is given a persistent URL (e.g.,
yourcompany.com/documents/2011/08/TPS-Report.doc) which can be private
(securely delivered only to members of your organization), password
protected (available only to those you select such as clients or
contractors), or public (published and hosted for the world to see).
If you catch a typo and upload a new version, that URL will continue
to point to the latest version, regardless of how many changes you
make."

However, given the way WP Multisite media files are served, it may
take additional apache rules to completely block access.

Boston University has written some custom code to do this -- I believe
it writes htaccess files to protect media uploads. You can see their
documentation (but not their code), here for some ideas:

http://www.bu.edu/tech/web/departments/wordpress/management/access/content-protection/

-Bill


On Mon, Mar 5, 2012 at 9:24 AM, Grogan, David <David.Grogan at tufts.edu> wrote:
> Hello all,
>
> We have a large multi-site instance of WP 3.3.1 and although you can make your WordPress site private to individual named accounts (e.g. try accessing http://sites.tufts.edu/dgtest) it's really only the posts and pages content that is private. Any content uploaded to the sites Media Library (e.g. documents, images, audio etc) is still publicly accessible (e.g. try accessing: http://sites.tufts.edu/dgtest/wp-content/blogs.dir/856/files/2012/03/FCKeditor.png).
>
> Has anyone come across a solution that will provide privacy to the media library files?
>
> David
>
> --------------------------------------------------------------
> David Grogan
> Senior Solutions Specialist
> Educational & Scholarly Technology Services (ESTS)
> University Information Technology (UIT) Tufts University
> 108 Bromfield Rd
> Somerville, MA  02144
>
> Phone: 617.627.2859
> Fax: 617.627.3082
>
> http://uit.tufts.edu/at/
> http://sites.tufts.edu/davidgrogan
>
>
>
>
> _______________________________________________
> wp-edu mailing list
> wp-edu at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/wp-edu