Re: Secure file access with contrib.auth

2008-05-19 Thread Julien
Thanks, this is all clear now. Is there a method/function/attribute in Django that tells you what server you're currently running on, that is, the dev server or others like Apache? On May 19, 11:25 pm, John Hensley <[EMAIL PROTECTED]> wrote: > On May 19, 2008, at 4:18 AM, Julien wrote: > > > I in

Re: Secure file access with contrib.auth

2008-05-19 Thread John Hensley
On May 19, 2008, at 4:18 AM, Julien wrote: > I installed mod_xsendfile and I tried your code, but the file that's > downloaded from the view is empty. > This might be because I've tested it using the development server on > port 8080. So I guess Apache is out of the loop :/ Yes, this approach on

Re: Secure file access with contrib.auth

2008-05-19 Thread Julien
Hi, Thanks a lot for that info. This is really useful. I installed mod_xsendfile and I tried your code, but the file that's downloaded from the view is empty. This might be because I've tested it using the development server on port 8080. So I guess Apache is out of the loop :/ I also have Apac

Re: Secure file access with contrib.auth

2008-05-17 Thread John Hensley
You can do this with Apache. You need to add mod_xsendfile (http://tn123.ath.cx/mod_xsendfile/ ) to your Apache config, then control access to the files with a Django view. A quick search of this group turns up references to mod_xsendfile, but no example view, so here's what it might look li

Secure file access with contrib.auth

2008-05-15 Thread Julien
Hi, I'm building a website where users can create projects and upload files for their projects. I already have a system in place so that only members of a project can access the project related pages. Now, I'd like it to be more secure by only giving access to the files of a project to its member