mahara-contributors team mailing list archive

[Aaron Wells <1224750@xxxxxxxxxxxxxxxxxx>]

Okay, I see it now. The text on the Site Files page explains it better.

1. All files in Site Files can be chosen from the "Site Files" section
of the artefact chooser, for use in pages, by any user.

2. All files in Site Files can be accessed by a download URL like
http://example.com/artefact/file/download.php?file=7 , by any logged-in
user, whether or not that file is also used in a page visible to that
user.

3. All files in the "public" directory of Site Files can be accessed by
a download URL like http://example.com/artefact/file/download.php?file=7
, by LOGGED-OUT users, whether or not that file is also used in a page
visible to the public.

So these are perhaps the only file uploads in Mahara which can be viewed
by non-logged-in users without having to be embedded in a page.

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1224750

Title:
  Site files located in a subfolder cannot be accessed by normal users

Status in Mahara ePortfolio:
  Fix Committed

Bug description:
  This is the original bug report on bug #1223069. Because the
  discussion went into a different direction and a different feature
  developed which does not address this issue here directly, I created a
  new report.

  According to the Site Files documentation, files uploaded into the
  site files section are meant to be accessible to all logged-in users
  (via the "Site Files" tab on any file selector). The one exception to
  this is files in the hard-coded "Public" folder, which are meant to
  also be accessible to users who aren't logged in.

  A user on the #mahara irc channel reported that Site Files sitting in
  a subdirectory, however, are not accessible to normal users. I
  verified this behavior in 1.8dev.

  To reproduce:

  1. Log in as an admin user
  2. Go to the Site Files page
  3. Create a subdirectory
  4. Upload a file into that subdirectory
  5. Log in as a non-admin user
  6. Add a "files to download" block to a page
  7. In the block's file selector, go to the "site files" page
  8. You will not see the subdirectory you created in step 4, or be able to access its files.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1224750/+subscriptions