I think you could modify rocket to return a 404 for a request with an etag or if-not-modified request in that particular folder, that should probably do it, to prevent downloads from the same device. for downloads from different devices, the approach like niphlod said would work, set a timeframe to dowload the file.
On Sunday, November 10, 2013 1:10:54 PM UTC-7, Encompass solutions wrote: > > Great input! I think I will try the following: > Create a special directory to store the data. > Setup a special controller with the needed permissions and conditions. > Have fun and do a little dance. > Does this sound sensible? > BR, > Jason > > > On Sun, Nov 10, 2013 at 2:43 PM, Niphlod <nip...@gmail.com > <javascript:>>wrote: > >> >> >> On Sunday, November 10, 2013 7:49:00 AM UTC+1, Encompass solutions wrote: >>> >>> I need a way to make downloads private/one time for the user. >>> What is the best practice for this? >>> * Should I need a special download script? My guess is yes. >>> * Should I have a special directory and how would I best do that? >>> >> >> unless stored under /static/, no. web2py has no knowledge (so, the >> end-user doesn't either) of files outside the /static/ dir except for >> uploads/, that you can however "restrict" in any way you want through the >> "normal" auth permission scheme. >> >> >>> * Is there a way to create one time downloads without authentication? >>> Some of my cases will need authentication and some not. >>> >> >> in that case you surely have to serve files with your own controller >> checking for custom authorizations and such. BTW, one time dowloads are >> either hard to achieve or (from the end-user perspective) hard to offer. >> Several browser's extension download files with multiple connections to >> speed up the retrieval and so you can't just rely on accepting only the >> first request coming from that particular file (or those tools will >> probably error out as soon as the second connection is initiated). Usually >> instead of one-time-only downloads sites serve expiring links (i.e. "you >> can download it only for the next two days") coupled with a sane amount of >> trials (let's say 10, if files are not huge). >> >> -- >> Resources: >> - http://web2py.com >> - http://web2py.com/book (Documentation) >> - http://github.com/web2py/web2py (Source code) >> - https://code.google.com/p/web2py/issues/list (Report Issues) >> --- >> You received this message because you are subscribed to a topic in the >> Google Groups "web2py-users" group. >> To unsubscribe from this topic, visit >> https://groups.google.com/d/topic/web2py/JtlqR-WWicQ/unsubscribe. >> To unsubscribe from this group and all its topics, send an email to >> web2py+un...@googlegroups.com <javascript:>. >> For more options, visit https://groups.google.com/groups/opt_out. >> > > -- Resources: - http://web2py.com - http://web2py.com/book (Documentation) - http://github.com/web2py/web2py (Source code) - https://code.google.com/p/web2py/issues/list (Report Issues) --- You received this message because you are subscribed to the Google Groups "web2py-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to web2py+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.
