Ticket for: Job Board Manager
0
Martin Sauter
When a job poster adds a company logo, he has acess to all items in the media library. That's not the way it should be, he should only see his own media items. (This might even be a security issue since some media items could be confidential.)
2 Subscribers
Submit Answer
2 Answers
Best Answer
1
Welcome to our forum.
I just try your suggestion, found the solution here,
you can add following code to restricted other files.
add_filter( 'ajax_query_attachments_args', 'show_current_user_attachments' );
function show_current_user_attachments( $query ) {
$user_id = get_current_user_id();
if ( $user_id ) {
$query['author'] = $user_id;
}
return $query;
}
Regards
Replying as
Submit
Best Answer
0
Welcome to our forum.
Don't worry, media uploader only display public files, not secured or hidden files, basically, any user can access your public file via url. Hope you understand.
Regards
Yes, I know that media files are not truely protected by the code you have posted above. But it's a good enough solution for our needs.
Replying as
Submit
This works fine, thank you.
I think this should be the standard behaviour of your plugin. It's very irritating if you publish a job for company A and see the logo of company B (and maybe many other files) in the media library.