php - Only allow access to a file if logged in to the CMS [SilverStripe] -
when user creates booking via website, invoice (pdf) generated , saved in assets/invoices. staff members access these download , email clients. however, @ moment if exact url known able access whether logged in or not. trying restrict access these files logged cms only. there way via permissions module?
is secure assets module after: https://github.com/silverstripe-labs/silverstripe-secureassets
with can set permission files/folders "that mirrors access restrictions of sitetree pages".
Comments
Post a Comment