What is the best way to restrict access to a set of pdf documents?
I really don’t want to have to use additional .htaccess grant or
rewrite rules for this.
given this setup
public/pdfdocs
How do I restrict people from simply entering
http://mysite/pdfdocs/docxxx.pdf
I tried using routes.rb just as a test which sort of worked.
map.connect ‘/pdfdocs/:name’, :controller => ‘account’, :action =>
‘login’
if they guess the document name correctly then they don’t get the login
screen and the file is downloaded if it is wrong then the login screen
is presented, but this should happen always as i am saying here, always
go to the login screen.
Maybe this is totally the wrong thing to do but it seems as though it
could solve my problem easily as I would then just have to check that
they are logged in before offering the document.
Thanks
Bruce