Created attachment 79410 [details] step1 I want to restrict access to the files I upload in the Koha automation system. What steps can I use? Thank you. 1. 1. Opac Display - Disable ( This collection will be private) 2. https://www.youtube.com/watch?v=mbYgsodcPaU (How to attach a file to a MARC Record in Koha) 3. Cataloging step 4.Copy upload file link ( For Example : http://193.140.223.100/cgi-bin/koha/opac-retrieve-file.pl?id=eca42072bd9eb83f28260e9c9e7f0e2f ) 5. Log out Koha 6. Paste link any browser than file is open. I want to system asked username and password
Created attachment 79411 [details] step3
Created attachment 79412 [details] step6
I figured there would be a lot of duplicate bug reports for this enhancement request, but this is the only one I've seen...
Comment on attachment 79411 [details] step3 ffff
Renaming this a bit in hopes of getting more attention, as this does seem like a useful feature.
It should be easy enough to add another column to uploaded_files. Something like "access_level" or "anonymous_access". The column will only make sense relative to the "public" column, which makes the additional column feel weird. So another idea would be to change the logic of the "public" column. NULL can be non-public, 1 can be public anonymous access, and 2 can be public authenticated access. Using integers instead of codes makes things less maintainable in the long-term though, as it's not clear at a glance what it means. I think this is a problem we've often ran into Koha. So... maybe "1" means public anonymous access, and "auth" means public authenticated access. Of course, that would require a DB schema change which changes "public" from tinyint(4) to something like char(4). And at that point maybe it's worth rewriting "1" to "anon" as well. -- Anyway, just some thoughts. I haven't had any customers asking for this, so it's not a priority for me, but that's how I'd do it.
(In reply to David Cook from comment #6) > Anyway, just some thoughts. I haven't had any customers asking for this, so > it's not a priority for me, but that's how I'd do it. I say that... but I do hear people talk about this at times... People want ways to provide files and links to resources to only authenticated users. So there is a bigger (but related) feature gap than just what is described here. Still probably not a priority for me at this point, but it's always possible that I might revisit this one day. (He says optimistically.)