You need to be logged in to post in the forum - Log In

An active JCE Pro Subscription is required to post in the forum - Buy a Subscription

Support is currently Online

Official support hours
Monday to Friday
09:00 - 17:00 Europe/London (BST)

#102102 Limit Root Upload and File Access

Posted in ‘Editor’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Latest post by acrossan on Friday, 06 December 2019 19:12 GMT

acrossan
We like to create a "videos" directory in the root so videos can live on the site with a shorter URL. Generally for limited use and videos used more as design elements.

Regardless, when we enable "root" access in the so we can present both the "images" and "videos" directories in the JCE File Browser, it does open the opportunity for users to access the root directory and edit files there or upload files.

What's the best way for me to give users access to both the "videos" and "images" directories, but prevent them from being able to upload or edit files in the root?

Thanks for your help and thanks for a great extension!

Ryan
You can use an as yet undocumented feature of the Directory Filter option, to restrict access within the root folder to your images and video folders.

In Editor Profiles -> Editor Parameters -> Filesystem, set 2 values for the Directory Filter field - the name of each folder you want to allow access to, with a + symbol in front of it. The + denotes the path is to be allowed rather than removed, and all other paths are to be restricted. So for your example:

https://cdn.joomlacontenteditor.net/tmp/102102-limit-root-upload-and-file-access.jpg

Ryan Demmer

Lead Developer / CEO / CTO

Just because you're not paranoid doesn't mean everybody isn't out to get you.

acrossan
THAT IS AWESOME!!!