Page 3 of 3

Re: Client Portals ~ with video tutorial.

PostPosted: February 4th, 2012, 4:20 am
by Cristián Lávaque
You're getting closer, but that's not exactly right.

If all reports are protected with the same access, like Level 2, then all users at Level 2 can download all the reports if they can guess the name, which wouldn't be hard.

This is why I was suggesting custom capabilities. If the user Mike has custom capability Mike and the report mike.pdf is in the download directory for the custom capability Mike, then John won't be able to download it even if he knew the URL to it, only Mike would.

E.g. /s2member-files/access-s2member-ccap-mike/reports-mike.pdf
http://mysite.com/?s2member_file_download=access-s2member-ccap-mike/reports-mike.pdf

Each user needs to have his own ccap. The uploader would need to upload to the directory for the ccap of the user the report is for.

I hope that makes more sense now. :)

Re: Client Portals ~ with video tutorial.

PostPosted: February 4th, 2012, 8:02 am
by Kimbro
Cristián Lávaque wrote:You're getting closer, but that's not exactly right.

If all reports are protected with the same access, like Level 2, then all users at Level 2 can download all the reports if they can guess the name, which wouldn't be hard.

This is why I was suggesting custom capabilities. If the user Mike has custom capability Mike and the report mike.pdf is in the download directory for the custom capability Mike, then John won't be able to download it even if he knew the URL to it, only Mike would.

E.g. /s2member-files/access-s2member-ccap-mike/reports-mike.pdf
http://mysite.com/?s2member_file_download=access-s2member-ccap-mike/reports-mike.pdf

Each user needs to have his own ccap. The uploader would need to upload to the directory for the ccap of the user the report is for.

I hope that makes more sense now. :)


Hi Cristian,
I realize what you are saying but I need to automate this.
Is there a way to configure the ccap something like:
http://mysite.com/?s2member_file_downlo ... mber-ccap-%%user_name%%reports-%%username%%.*file

Then if the teachers rename every file they want to upload to the students username like
mike.pdf

Any suggestions would be most welcome.

Thanks,

Kitty.

Re: Client Portals ~ with video tutorial.

PostPosted: February 4th, 2012, 7:09 pm
by Kimbro
Hi Cristian,
Perhaps a better way to ask this question - is there a way to identify the user through the file name that the teachers upload - automatically?
Then have only the files attached to that identity enabled for download by the user they are intended for?
Cheers,
Kitty.