- SD-247Getting issue details... STATUS
Secure files is a media content type custom-built for DTF. It is only available for use on the new SDP DTF corporate website (not launched yet). The purpose is so that only permitted users can create, view and edit specified files and that the private and confidential files are hidden from public view.
Permissions
Secure files can only be accessed by people with the Secure files user role. CMS users with this role can add, view, edit, delete and revert secure media files.
Secure file user permission can be requested via a support request to add or change user permissions. All requests for this permission role must be approved by Paul Bowerman, DTF digital manager.
Users without secure file user permission can filter and view secure files in the media section of the CMS. However, if they click on a file, the content is not displayed. They can’t change the name of any secure files. They can see where the file has been used.
File types
Allowed secure files file types are:
pdfs
Microsoft Excel (xls, xlsx, csv, xlsm
Microsoft Word (doc, docx, dotx)
Microsoft PowerPoint (ppt, pptx).
Adding a secure file
The process to add a secure file is similar to how you add documents.
The only difference is you choose Secure file instead of Document when creating the media item.
What website users see
If a website user visits a page with a secure file on it (whether embedded or linked), clicking on the file will result in a 404 not found page.
Is this correct?
Editors can embed a file on a page even if they don’t have permission. Why would they want to do that when barely anyone can read the file?