CUNY Academic Commons

Thanks for reporting, Bess! We'll look into this and get back to you soon.

Thanks for the message, Bess. I'm changing the subject line to clarify the purpose of the ticket somewhat - the privacy of uploaded files is not, strictly speaking, a security issue.

Related issues: #2695, #2697.

I've had a look at how media-vault works, and I don't feel totally confident about it. It makes on-the-fly modifications to our main .htaccess file, which is risky because it controls access to our site in a number of ways, and is not very good practice because that file is not currently writeable by the webserver. (Non-technical description: I'm not confident that media-vault will work with the Commons setup.)

Bess, have you looked at the plugin WP Document Revisions, already installed on the Commons? If your goal is to upload files that will only be available to a certain subset of logged-in users, I think it will probably suit your needs. Could I ask you to activate it on your site and test it, please?

Going to close this one due to lack of activity, and on the assumption that the WP Document Revisions plugin will do the trick. Bess, if you continue to have issues or questions, don't hesitate to leave a note here or in a new ticket.