Hi All,

 

I have an item restricted to certain users and obviously the item cannot be viewed if the user is not logged in. But if you know the url for the attachment, say a pdf then you can just type that in and get an instant download to that file.

 

Is there a way to restrict the attachment so that even if you know the direct url of the file you cannot download this?

 

Cheers 

 

Mark

Do we start thinking about permissions of the files here or htaccess?

Or something to keep people from knowing and/or guessing the filenames, im not sure