Access control for viewing pictures

Hi, I'm testing CKFinder in my environment.
About access control, I can't see how CKFinder will enforce "view" access control to only registered users:
When I click on "view" file (in the context menu) it just shows the images directing the user to the url of the images in the webserver tree.
Doing this, the access control can only be implemented on the server and no PHP is involved. A non user can guess the url and see the images as well.
Probably I'm missing something, can you give me a hint on how it is supposed to work?

Thanks Paolo

Wed, 09/14/2011 - 12:05

wiktor

Joined: 16/07/2007

Posts: 1641

Re: Access control for viewing pictures

Wiktor Walc
CTO, CKSource - http://cksource.com
--
Follow CKEditor on: Twitter | Facebook | Google+

Fri, 09/16/2011 - 21:48

pnp_anchor

Joined: 12/09/2011

Posts: 11

Re: Access control for viewing pictures

Hi Wiktor,
Thank you for the suggestions. I like the last one.I'll let you know how I'm doing.
/Paolo

Mon, 09/19/2011 - 11:23

pnp_anchor

Joined: 12/09/2011

Posts: 11

Re: Access control for viewing pictures

/viewfile.php?url=/path/to/my/file.jpg

background-image: url('http://www.example.com/ckfinder/core/connector/php/connector.php?command=Thumbnail&type=Files&currentFolder=%2Fpath%2Fto%2Fmy%2F&langCode=da&hash=6d1ea1cb358e4e22&FileName=file.jpg');

background-image: url('/najub/viewer/?file=_thumbs/path/to/my/file.jpg?hash=6d1ea1cb358e4e22');

Mon, 09/19/2011 - 13:20

pnp_anchor

Joined: 12/09/2011

Posts: 11

Re: Access control for viewing pictures

hmm, I see mow that the 2nd way of displaying thumbnails, mentioned, above apparently only happens in my own (special) setup and not in the out of the box installation. I need to investigate this further, so please do not use your time on this. I'll get back as soon as I have a clearer picture.
Thx, Paolo

Mon, 09/19/2011 - 15:24

wiktor

Joined: 16/07/2007

Posts: 1641

Re: Access control for viewing pictures

Try this:

$config['Thumbnails']['directAccess'] = false;

Wiktor Walc
CTO, CKSource - http://cksource.com
--
Follow CKEditor on: Twitter | Facebook | Google+

Mon, 09/19/2011 - 17:22

pnp_anchor

Joined: 12/09/2011

Posts: 11

Re: Access control for viewing pictures

Thu, 09/22/2011 - 21:40

wiktor

Joined: 16/07/2007

Posts: 1641

Re: Access control for viewing pictures

Wiktor Walc
CTO, CKSource - http://cksource.com
--
Follow CKEditor on: Twitter | Facebook | Google+