intoeetive/protectedlinks

User is not permitted to perform this action

Closed this issue · 5 comments

We're trying to create a way to just obfuscate the links but receiving this error when accessed without login. Did a little digging and found out that guest (non-logged in) users has no viewVolume permission. Have already tried requireLogin but its not working. How can we resolve it?

I'm getting the same issue here. Would love a resolution...

Got to work by forking the repo and removing this line from src/controllers/LinkController.php.

$this->_requirePermissionByAsset('viewVolume', $asset);

Obviously this allows downloads without authentication which is perfect for our case: obfuscating download links.

@intoeetive Will you consider making this line conditional on wheather the user is logged in or not? Sometimes all we want is to hide the location of the file and prevent hotlinking.

@intoeetive ran into the same issue. You have a paid plugin, can we expect a bit more support? Or is this plugin not maintained anymore?

I am sorry for making everyone wait for so long.

The update has been released with a fix - now asset permissions are only checked if membership is required in any form.