Restrict Access to a Directory
 

Good afternoon

We have a large repository of technical data in HTML format that is currently accessed via a private forum accessible by a single group of users (numbering about 250).

The directory format all the files are stored in is /html/dir/subdirs and there are several hundred files in those sub directories.

If the URL is known they can be accessed by anyone but we need to restrict them to the chosen user group only.

I've read about the various access control methods discussed here but they all rely on code inside the html page (those that support html) whereas I am really looking for authentication at the directory level.

Is it at all feasible?

Obviously we don't want to use a secondary login for access so as far as I can see use of .htaccess is ruled out - although there wouldn't be any objection to the user having to authenticate with their vb user name and password if that was the only viable option.

We originally had these docs in jpg form and controlled access via the vb integration with Photopost but they were too hard to use in that form. We had also tried adding them inside vbPortal which we use as our CMS but the restriction by user group works very poorly in that product.

Any help appreciated.

Cheers
Russ

As these are simple webpages any access control will need to be done on the level of the webserver (apache/?). So i doubt you can get away without using a .htaccess. I am not aware of any modification that will (automatic) restrict standard webpages based on vBulletin user(group)s.

You could however obfuscate the pages by making the directory not indexable and add something random to the filename/path. Only those with access to a thread in which these URL's are posted would have access. But that only works until someone shares them with others, so not much bulletproof.