I have been set the task to create a file library application.
This application is user retricted. This means certain files is retricted to certain users etc.
If i store the files the user upload to a directory, what is stopping a user accessing the file if they know the direct link to it? I can not restrict the whole folder using web.config as some files the user will have access to.
Is it more plausible to store all the files in the database and use http handler to check user access level? I am abit concerned about the size the database i.e. gigs. Will this affect performance?
Any suggestion is welcome!
Thanks.
...
Go to the complete details ...