I have a client with large number of files available to customers, but only certain files are available for each customer (based on db entries). I don't want to use directory level security per customer, because that would mean many copies of the same file (though I'll use directory level security to ensure only customers see any files). I can easily show a user only the files they are authorized to view, but how do I restrict a customer from not directly accessing additional files in the same directory that they are not authorized to see?
A simple example -- files are named a.pdf, b.pdf, c.pdf, d.pdf, and e.pdf, all in the same directory.
Customer 1 is allowed to see only a.pdf and b.pdf
Customer 2 is allowed to see only c.pdf and d.pdf
Customer 3 is allowed to see only a.pdf and e.pdf
How do I stop Customer 2 from seeing a.pdf, for example?
thanks!
...
Go to the complete details ...