mirror of
https://github.com/discourse/discourse.git
synced 2024-12-12 12:33:44 +08:00
102909edb3
This PR introduces a new secure media setting. When enabled, it prevent unathorized access to media uploads (files of type image, video and audio). When the `login_required` setting is enabled, then all media uploads will be protected from unauthorized (anonymous) access. When `login_required`is disabled, only media in private messages will be protected from unauthorized access. A few notes: - the `prevent_anons_from_downloading_files` setting no longer applies to audio and video uploads - the `secure_media` setting can only be enabled if S3 uploads are already enabled and configured - upload records have a new column, `secure`, which is a boolean `true/false` of the upload's secure status - when creating a public post with an upload that has already been uploaded and is marked as secure, the post creator will raise an error - when enabling or disabling the setting on a site with existing uploads, the rake task `uploads:ensure_correct_acl` should be used to update all uploads' secure status and their ACL on S3
18 lines
424 B
Ruby
18 lines
424 B
Ruby
# frozen_string_literal: true
|
|
|
|
module Jobs
|
|
class UpdatePrivateUploadsAcl < ::Jobs::Base
|
|
# only runs when SiteSetting.prevent_anons_from_downloading_files is updated
|
|
def execute(args)
|
|
return if !SiteSetting.enable_s3_uploads
|
|
|
|
Upload.find_each do |upload|
|
|
if !FileHelper.is_supported_media?(upload.original_filename)
|
|
upload.update_secure_status
|
|
end
|
|
end
|
|
end
|
|
|
|
end
|
|
end
|