COMMUNITY FORUM

Users have frontend access to all files in media manager

Start
Prev
1
Next
End

wintercorn
Topic Author
Offline
New Member

9 years 1 month ago #152738 by wintercorn

Users have frontend access to all files in media manager was created by wintercorn

K2 2.6.9 on J3.5.0

We have a url which was broken (file was removed) and should result in a 404 but instead allows frontend users to view the media manager and browse all files.

Example url with domain changed : www.example.com/media/documents/c1/a117/f6/cat_tool.zip

No SEF extension used on the site and redirect plugin is disabled.

Any ideas?

Thanks

Please Log in or Create an account to join the conversation.

Krikor Boghossian
Offline
Platinum Member

9 years 1 month ago #152749 by Krikor Boghossian

Replied by Krikor Boghossian on topic Users have frontend access to all files in media manager

All frontend users or just the registered ones?
Have you checked your .htaccess files for any inconsistencies?

Please Log in or Create an account to join the conversation.

wintercorn
Topic Author
Offline
New Member

9 years 1 month ago #152752 by wintercorn

Replied by wintercorn on topic Users have frontend access to all files in media manager

It's just registered users and there's nothing odd in the .htaccess file. I've tried it with the default Joomla! file also and no difference.

Please Log in or Create an account to join the conversation.

Lefteris
Offline
Platinum Member

9 years 1 month ago #152758 by Lefteris

Replied by Lefteris on topic Users have frontend access to all files in media manager

@wintercorn

The URL for the media manager in front-end is index.php?option=com_k2&view=media .

So if your homepage is a link to a K2 item then www.example.com/media is translated to the above link. Try to change your homepage to a different view.

Please Log in or Create an account to join the conversation.

wintercorn
Topic Author
Offline
New Member

9 years 1 month ago #152762 by wintercorn

Replied by wintercorn on topic Users have frontend access to all files in media manager

Home menu item is :

index.php?option=com_k2&view=itemlist&layout=category&task=category&id=188

which just loads a blank K2 item so the page can be populated with modules.

I'll see if a different page makes any difference.

Please Log in or Create an account to join the conversation.

wintercorn
Topic Author
Offline
New Member

9 years 1 month ago #152772 by wintercorn

Replied by wintercorn on topic Users have frontend access to all files in media manager

A different page didn't make any difference to the issue.

Please Log in or Create an account to join the conversation.

wintercorn
Topic Author
Offline
New Member

9 years 1 month ago #152932 by wintercorn

Replied by wintercorn on topic Users have frontend access to all files in media manager

Any suggestions? I can send the link via PM if that would be of help.

Thanks

Please Log in or Create an account to join the conversation.

wintercorn
Topic Author
Offline
New Member

9 years 4 weeks ago #153283 by wintercorn

Replied by wintercorn on topic Users have frontend access to all files in media manager

I've now checked all menu items and none are pointing to the media manager yet registered users can still view it with a certain url.

Does anyone have any further suggestions to try?

Thanks

Please Log in or Create an account to join the conversation.

Krikor Boghossian
Offline
Platinum Member

9 years 4 weeks ago #153294 by Krikor Boghossian

Replied by Krikor Boghossian on topic Users have frontend access to all files in media manager

Is frontend editing enabled for these users and user groups?

Please Log in or Create an account to join the conversation.

wintercorn
Topic Author
Offline
New Member

9 years 4 weeks ago #153300 by wintercorn

Replied by wintercorn on topic Users have frontend access to all files in media manager

No, it's disabled for all except Super Admins.

Please Log in or Create an account to join the conversation.

Start
Prev
1
Next
End