m-o-p / labsystem

The labsystem eLearning system for creating and managing hands-on courses.
GNU General Public License v3.0
15 stars 9 forks source link

Protect lab data files from global access. #90

Open m-o-p opened 7 years ago

m-o-p commented 7 years ago

Pictures that are part of lab instructions etc. are currently public if one knows the URL.

Mitigation: Protect them to being accessible by legitimate lab viewers only.

Hint: similar to the user file uploads that are protected... Challenge: rewrite of links; however, the export/ import does that anyways...