restricting downloads

I have many private groups, in my forum, and we utilize the file up/download quite frequenly, we are using the aspsmartupload component.

Now to the problem, the uploads gets stored on the server under a directory in the users name. Usually the link is in a post in a forum. people with access to this post can download the attachment. But we also have people that don't have access to this topic, but other forums, these people can still download that attachment if they would be sent the link in a mail with an direct url to the attached uploaded document.

ie attchments gets stored like this:

https://forum.org/forum/uploads/files/username/uploaded_docu ment.doc

anyone that have access to the server can download that document, well, they must know the url, but still its a bit scary as we really need security on these documents, we are using the active directory integration with this so we dont have to common login procedure for users. Any idea on a solution?

i "could" start using a lot of groups, and start securing the documents, problem is new users, and a lot of administration. Any nifty idea for an solution?

//Dave

there is a nt auth modekhurram.

As for your probelm, you can set ntfs permissions on that folder so only authorized users have access. Besides that it should be fairly easy to mod the forum, in a way that the files upload to a private directory, then when someone clicks a link that must be generated dynamically it gets streamed to the user, this link can be different every time. 4guysfromrolla has a tutorila on how to do that.