How does the package handle media items that need to be securely protected? If the item was placed on a page then i could secure the page and ultimately the document, but if i'm accessing the media item directly I bypass the security?
2. Add checkbox call it secure and set to true for secure items
In both cases implement GatheringNode data event for the media indexer and then check if the media is protected for 1 not sure how you would get the status of the file but im sure there is api or you can make call into database etc to get the file status for 2 look for true value on media item. Inject the value into the index into new field call it Secure? Also if using 1 you should be able to inject in groups who have access.
Next step. When building your query check if user is logged in if so get his groups and then use that as a filter. If not logged in then update the query so that all protected items are excluded.
Security of media item
Hi Ismail,
How does the package handle media items that need to be securely protected? If the item was placed on a page then i could secure the page and ultimately the document, but if i'm accessing the media item directly I bypass the security?
Craig,
You have a 2 options.
Craig,
The package does not handle secure items as such however you have a number of options:
1. Use the paid package media protect and then protect your media files see http://our.umbraco.org/projects/website-utilities/media-protect
2. Add checkbox call it secure and set to true for secure items
In both cases implement GatheringNode data event for the media indexer and then check if the media is protected for 1 not sure how you would get the status of the file but im sure there is api or you can make call into database etc to get the file status for 2 look for true value on media item. Inject the value into the index into new field call it Secure? Also if using 1 you should be able to inject in groups who have access.
Next step. When building your query check if user is logged in if so get his groups and then use that as a filter. If not logged in then update the query so that all protected items are excluded.
Regards
Ismail
Thanks Ismail,
I think between both packages I do have a solution and an option for my client. Really appreciate your help and the speedy response.
is working on a reply...