Restrict media/file access with special permissions

Support Plugins
2

@schneech, Maybe an earlier discussion on protecting video/image inside a page folder might give some insight/ideas: How to protect video and photos from folder

Summary:
When using protect_protected_page_media: true in ‘/config/login.yaml’ it will only work if the url to the image is site relative and not a physical path.

  • Physical path:
    http://mydomain/user/pages/02.typography/image.jpg is not under access control
    This url is created when using markdown syntax: ![My Image](image.jpg)
  • Site relative:
    http://mydomain/typography/image.jpg is under access control.
    This requires manual creation of the <img> tag: <img src="/typography/image.jpg">

Note: If someone knows Grav, one could ‘guess’ the page relative url and gain access again…