Advanced File System

Posted by hypertext200 on March 19, 2009 at 5:50am

About Me : I’m a final year BSc student of University of Moratuwa Sri Lanka. IRC : heshan

Overview: Fixing Drupal private and public file system and make sense what it says.

Description: I saw that current file system in Drupal make no sense when it is in private, you may see its not deny direct access to the files uploaded to Drupal, anonymous can directly download files, view images using its URL etc. This will more critical when someone wants to setup a paid content site with Druapl, so many multimedia modules doesn’t support their major functionality (eg: in video module it doesn't work with private files) when file system is private too.

These forum topics evidence on that.
http://drupal.org/node/107864
http://drupal.org/node/116843
http://drupal.org/node/259920

Mentors: OPEN

Difficulty: Medium

Comments

The Media module addresses

Posted by aaron on March 19, 2009 at 12:00pm

The Media module addresses this, backporting Drupal 7's PHP Stream Wrappers, thus allowing Public and Private files to co-exist.

Aaron Winborn
Drupal Multimedia (book, in October!)
AaronWinborn.com (blog)
Advomatic (work)

Aaron Winborn
Drupal Multimedia (my book, available now!)
AaronWinborn.com
Advomatic

@aaron : Does the media

Posted by hypertext200 on March 19, 2009 at 12:42pm

@aaron : Does the media module provide, deny direct access to the upload files when file system is private. Personally I faced that difficulty when I work with the D5 with video and image modules. According to the your Drupal Multimedia book I saw that you have mentioned using image/video modules are kind of a traditional act, so that question may be too traditional.

Senior Drupal Developer at DrupalConnect

not sure...

Posted by greggles on March 19, 2009 at 1:03pm

anonymous can directly download files, view images using its URL etc.

If you use a private location on the filesystem (i.e. outside of the docroot) then this is not the case.

I think the proposal needs a lot more detail on what would/wouldn't be fixed before it can be considered. As it stands right now, my sense is that the goal here is to "fix" something which is not broken.

--
_{Growing Venture Solutions | Drupal Dashboard | Learn more about Drupal - buy a Drupal Book}

knaddison blog | Morris Animal Foundation

Greg addressed this better

Posted by aaron on March 19, 2009 at 1:10pm

Greg addressed this better than I did. The private file system actually works quite well for what it's for, and addresses your concern, as long as you configure it properly.

The Media module will extend this functionality, so that private files would be stored using a PHP Stream Wrapper, and a scheme of private:// (as opposed to public://), allowing you to mix a private and public file system.