Unable to access private file?
I had this issue before, and last time the problem was that node was unpublished. The private file became accessible when the node was published.
This time, however, I'm not using a node. I'm just using Drupals file manage system to store my own files for my own custom module. SO I generated a url for an image file like so:
$imageFile = file_load($userInput['fid']);
$style = Drupal::entityTypeManager()->getStorage('image_style')->load('thumbnail');
$url = $style->buildUrl($imageFile->getFileUri());
If I print out the URL, I get:
http://localhost/system/files/styles/thumbnail/private/cfiles/test.png?itok=Le14o4Zs
But when I access that, i get "access denied".
What am I missing?
8 images
asked Mar 19 at 7:54
coderamacoderama
36221232
add a comment |
I had this issue before, and last time the problem was that node was unpublished. The private file became accessible when the node was published.
This time, however, I'm not using a node. I'm just using Drupals file manage system to store my own files for my own custom module. SO I generated a url for an image file like so:
$imageFile = file_load($userInput['fid']);
$style = Drupal::entityTypeManager()->getStorage('image_style')->load('thumbnail');
$url = $style->buildUrl($imageFile->getFileUri());
If I print out the URL, I get:
http://localhost/system/files/styles/thumbnail/private/cfiles/test.png?itok=Le14o4Zs
But when I access that, i get "access denied".
What am I missing?
8 images
asked Mar 19 at 7:54
coderamacoderama
36221232
add a comment |
I had this issue before, and last time the problem was that node was unpublished. The private file became accessible when the node was published.
This time, however, I'm not using a node. I'm just using Drupals file manage system to store my own files for my own custom module. SO I generated a url for an image file like so:
$imageFile = file_load($userInput['fid']);
$style = Drupal::entityTypeManager()->getStorage('image_style')->load('thumbnail');
$url = $style->buildUrl($imageFile->getFileUri());
If I print out the URL, I get:
http://localhost/system/files/styles/thumbnail/private/cfiles/test.png?itok=Le14o4Zs
But when I access that, i get "access denied".
What am I missing?
8 images
asked Mar 19 at 7:54
coderamacoderama
36221232
I had this issue before, and last time the problem was that node was unpublished. The private file became accessible when the node was published.
This time, however, I'm not using a node. I'm just using Drupals file manage system to store my own files for my own custom module. SO I generated a url for an image file like so:
$imageFile = file_load($userInput['fid']);
$style = Drupal::entityTypeManager()->getStorage('image_style')->load('thumbnail');
$url = $style->buildUrl($imageFile->getFileUri());
If I print out the URL, I get:
http://localhost/system/files/styles/thumbnail/private/cfiles/test.png?itok=Le14o4Zs
But when I access that, i get "access denied".
What am I missing?
8 images
8 images
asked Mar 19 at 7:54
coderamacoderama
36221232
asked Mar 19 at 7:54
coderamacoderama
36221232
asked Mar 19 at 7:54
coderamacoderama
36221232
asked Mar 19 at 7:54
coderamacoderama
36221232
asked Mar 19 at 7:54
coderamacoderama
36221232
36221232
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
In Drupal 8, private file permissions by default are given according to the entity to which they are attached. If the user has permission to view the entity, they will have permission to view the file.
If you are not attaching the file to an entity, then you will need to implement hook_file_download(), where you will determine whether or not the user has permission to access the file, and return a value accordingly. Currently, because you have no implemented this, access is denied by default.
Note that this hook can be implemented even when the file is attached to an entity to provide additional access checks and/or additional headers.
answered Mar 19 at 8:49
JaypanJaypan
7,60511032
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "220"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fdrupal.stackexchange.com%2fquestions%2f277951%2funable-to-access-private-file%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
In Drupal 8, private file permissions by default are given according to the entity to which they are attached. If the user has permission to view the entity, they will have permission to view the file.
If you are not attaching the file to an entity, then you will need to implement hook_file_download(), where you will determine whether or not the user has permission to access the file, and return a value accordingly. Currently, because you have no implemented this, access is denied by default.
Note that this hook can be implemented even when the file is attached to an entity to provide additional access checks and/or additional headers.
answered Mar 19 at 8:49
JaypanJaypan
7,60511032
add a comment |
In Drupal 8, private file permissions by default are given according to the entity to which they are attached. If the user has permission to view the entity, they will have permission to view the file.
If you are not attaching the file to an entity, then you will need to implement hook_file_download(), where you will determine whether or not the user has permission to access the file, and return a value accordingly. Currently, because you have no implemented this, access is denied by default.
Note that this hook can be implemented even when the file is attached to an entity to provide additional access checks and/or additional headers.
answered Mar 19 at 8:49
JaypanJaypan
7,60511032
add a comment |
In Drupal 8, private file permissions by default are given according to the entity to which they are attached. If the user has permission to view the entity, they will have permission to view the file.
If you are not attaching the file to an entity, then you will need to implement hook_file_download(), where you will determine whether or not the user has permission to access the file, and return a value accordingly. Currently, because you have no implemented this, access is denied by default.
Note that this hook can be implemented even when the file is attached to an entity to provide additional access checks and/or additional headers.
answered Mar 19 at 8:49
JaypanJaypan
7,60511032
In Drupal 8, private file permissions by default are given according to the entity to which they are attached. If the user has permission to view the entity, they will have permission to view the file.
If you are not attaching the file to an entity, then you will need to implement hook_file_download(), where you will determine whether or not the user has permission to access the file, and return a value accordingly. Currently, because you have no implemented this, access is denied by default.
Note that this hook can be implemented even when the file is attached to an entity to provide additional access checks and/or additional headers.
answered Mar 19 at 8:49
JaypanJaypan
7,60511032
edited Mar 19 at 12:57
answered Mar 19 at 8:49
JaypanJaypan
7,60511032
answered Mar 19 at 8:49
JaypanJaypan
7,60511032
answered Mar 19 at 8:49
JaypanJaypan
7,60511032
7,60511032
add a comment |
add a comment |
Thanks for contributing an answer to Drupal Answers!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fdrupal.stackexchange.com%2fquestions%2f277951%2funable-to-access-private-file%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
