[ic] pdf newbie problems

[Paul Jordan]

Michael Goldfarb [mikeg at contactdesigns.com] wrote:
>> Hello,
>> I have a download section in the customer service page, where an
>> affiliated dealer can download his current turnover statistics as a
>> pdf file.
>> These files are located in htdocs
>> /shopname/pdf/turnover/[username].pdf
>> which makes them all readable to everyone.
>>
>> How can I get it right so only the owner can download his file?
>>
>> And another question. Is there a tag (usertag?) or something that
>> searches a directory and returns all files? Or is this possible with
>> the IC search?
>>
>> Thank you
>> Chris Gruber
>>
>> _______________________________________________
>> interchange-users mailing list
>> interchange-users at icdevgroup.org
>> http://www.icdevgroup.org/mailman/listinfo/interchange-users
>>
>
> I assume that you are using something similar to the base Foundation
> in which case someone would have to be logged in to access the
> Customer Service page. If this is the case, you can use [data session
> username].
>


As Ed said, .access and .access_gate are your friends.

Also....  I have user specific downloads. I found that at least for me, the
easy way to do this was a combo of ITL and Mikes [enable-downloads] tag:

http://www.interchange.rtfm.info/downloads/usertags/index.html

It creates a random symlink at link-presentation-time, to the actual file which
can be in a non public dir. This also deters people from substituting common
usernames in the URL to look at others files, because it is continually
randomized, and (at least I) delete the symlinks in a cron after so long.

You need to know the name of the resource to be able to use it though. hmm...
Maybe it can be extended to entire directories... that may be pretty cool. At
any rate, look at the code, it is pretty easy to alter, if it doesn't quite fit
your needs.

WRT listing files, the admin does it, so I assume so. I was never able to
figure it out. There are perl/java scripts that do this, but I have been under
the impression when running under "WideOpen NO" it is impossible, so a mute
point in the front end, but I could be wrong.

Paul