Thread

I’m trying to limit access to files uploaded by members to just their own—how’s the best way to do this?

Specifics: Each member represents a separate manufacturing company. I want to let them upload logos, product photos, and product documentation (PDF’s) that are then linked to from EE pages they create and maintain. I want each member to only be able to delete/replace their own images and PDFs—and not touch other member’s files.

Should I set up separate upload directories and member groups for each company—limiting access to each directory to the corresponding member group? I could potentially have thousands of companies. Besides being a royal pain to implement/maintain, would there be any performance issue have thousands of member groups and upload directories on the server?

Any other ways I can limit access to uploaded files in Expression Engine?

Good stuff ... can definitely use that in what I am doing. But I don’t think it really solves the question at hand—unless I’m reading it wrong.

When a member publishes or edits an article (weblog post), I’m trying to limit what images and files they have access to within an upload directory—i.e. what documents they know about, have access to and can use when publishing or editing a page.

This is more of a content creation question than a web visitor access/download issue.