Protected files directly accessible

    • 4 posts
    November 18, 2022 5:24 PM EST

    I  have found that when someone has direct links they can access material as photo and video regardless of privacy settings in the system.

     

    Having media files directly accessible can cause privacy and security issues.

    Anyone know fix for this?

    • 4 posts
    November 18, 2022 5:26 PM EST

    What i mean is that i publish a photo album in a group that has privacy settings to be viewed by group members only or upload an album with view privacy friends only still i can access that when being logged in but not being my friend for example if i have direct link to the media. That is really not optimal.

    • 4 posts
    November 20, 2022 9:16 AM EST

    I have now tested more properly, problem seems to be with group and pages only- there people who are not group member can access media files via direct link even if view privacy set to group member only.

    • Moderator
    • 6431 posts
    November 21, 2022 5:12 AM EST

    You mention Pages and groups. Are you using third party products? SE doesn't have a pages plugin but third party experts do.