If this is a bug, you can perhaps put the file in DMS, and secure it there. Then on the protected page, put in a link to a protected file in DMS.
I know it is not a fix but it may be a workaround. Thanks Amir > -----Original Message----- > From: [email protected] [mailto:[EMAIL PROTECTED] > Sent: Wednesday, July 25, 2007 8:05 AM > To: [email protected] > Subject: [magnolia-user] Protecting pages and files > > Hi all! > I have encountered a problem on my pages which are protected > with user name and password. To protect the certain page I > have added that page and all pages belonging to it (children) > in the securedURI section for my public magnolia instance. > When I try to access a web page that I have secured I get > redirected to the login page, which is what I want. But when > I type in the URL to a file that is located some where under > the securedURI:s I can still download it, without being > forced to login first. > This page will be for our customers for downloading upgrades (e.g. > exe-files, zip-files, etc.). > > In short: > http://www.xyz.com/magnoliaPublic/howto.html --> Have to > login > http://www.xyz.com/magnoliaPublic/howto/contentParagraph/0/tex > t_files/file0/MyFile.zip > --> Does not have to login > I have secured "/howto.html" and "/howto/*", I also tried to > secure > "/howto/contentParagraph/0/text_files/file0/MyFile.zip" but I > can still download it without logging in first. > > Has any one solved this? Or is there another approach I can > use? (I'm using magnolia 3.0.2) Thanks! > > ---------------------------------------------------------------- > for list details see > http://documentation.magnolia.info/docs/en/editor/stayupdated.html > ---------------------------------------------------------------- > ---------------------------------------------------------------- for list details see http://documentation.magnolia.info/docs/en/editor/stayupdated.html ----------------------------------------------------------------
