Re: Protecting files

2006-08-02 Thread Derek Hoy
Sorry, this doesn't help with your problem with Apache, but Lighttpd has this: http://lighttpd.net/documentation/secdownload.html -- Derek --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "Django users" group. To p

Re: Protecting files

2006-08-02 Thread Bill de hÓra
Todd O'Bryan wrote: > Part of my webapp will include a place for users to upload files that > they can save on the server. I teach high school, and this is mostly > designed as a way for students to quickly upload files so that they > can transfer them from home to school and vice versa. >

Re: Protecting files

2006-08-02 Thread Adrian Holovaty
On 8/2/06, Max Sinelnikov <[EMAIL PROTECTED]> wrote: > No, you couldn't. Bobby can upload to this directory, Sussie can upload to > this directory, so Sussie can pass Django authorization with her own > login/password and can download all files. The right way is to serve files > in a directory whi

Re: Protecting files

2006-08-02 Thread Max Sinelnikov
No, you couldn't. Bobby can upload to this directory, Sussie can upload to this directory, so Sussie can pass Django authorization with her own login/password and can download all files. The right way is to serve files in a directory which is not Apache-accessile as offered by Nebojsa Dordevic. 200

Re: Protecting files

2006-08-01 Thread Adrian Holovaty
On 8/1/06, Todd O'Bryan <[EMAIL PROTECTED]> wrote: > What I don't understand is how, if the files are saved in the local > filesystem and served by Apache, how do I control access to the files > so that only users who should be able to access them can? In other > words, Bobby uploads a file which

Re: Protecting files

2006-08-01 Thread Nebojša Đorđević
On 1 Aug 2006, at 15:32, Todd O'Bryan wrote: What I don't understand is how, if the files are saved in the local filesystem and served by Apache, how do I control access to the files so that only users who should be able to access them can? In other words, Bobby uploads a file which I save to t

Re: Protecting files

2006-08-01 Thread limodou
On 8/1/06, Todd O'Bryan <[EMAIL PROTECTED]> wrote: > > Part of my webapp will include a place for users to upload files that > they can save on the server. I teach high school, and this is mostly > designed as a way for students to quickly upload files so that they > can transfer them from home to

Protecting files

2006-08-01 Thread Todd O'Bryan
Part of my webapp will include a place for users to upload files that they can save on the server. I teach high school, and this is mostly designed as a way for students to quickly upload files so that they can transfer them from home to school and vice versa. What I don't understand is how