[pmwiki-users] Upload protection not working

Petko Yotov 5ko at 5ko.fr
Mon Jun 6 16:03:09 CDT 2016

It works as expected on pmwiki.org:


If you have per-group uploads and want to protect a file, there is no 
interest to protect a single page - a visitor can download the file from 
another, unprotected page. In this case PmWiki will require "read" 
permissions for the whole group, which you set in 

If you have per-page uploads, PmWiki requires "read" permissions for the 

"upload" permissions are only required for people to upload files, not 
to download them. To download them they need "read" permissions.


Change log     :  http://www.pmwiki.org/wiki/PmWiki/ChangeLog
Release notes  :  http://www.pmwiki.org/wiki/PmWiki/ReleaseNotes
If you upgrade :  http://www.pmwiki.org/wiki/PmWiki/Upgrades

On 2016-06-06 21:44, ccox at endlessnow.com wrote:
> Consider the following url.  I have direct downloads disable and 
> htaccess
> is blocking the uploads area.  So, attachments to get translated like 
> so:
> https://www.example.com/Test/Directors?action=download&upname=directors.jpg
> However, I have protected read, edit, attr and upload for the page
> Test/Directors.. and I can still get to the content.
> Do I have to protect the group instead?  Perhaps I need to go to per 
> page
> uploads? Would that fix things?

More information about the pmwiki-users mailing list