Posted on 09/07/2019 11:52:28
Hi Kurt,
There are multiple things to consider when implementing a Document repository in Dynamicweb.
The first thing to be aware of, and the most critical, is that as long as files are present in the Files folder, anyone can access them. With some exceptions, all files in the Files folder are accessible if you know the url for them: <domain.tld>/Files/<your path here>. This, of course, is to make the website work with javascript, css, images and so forth. You would have to do some creative stuff in the Web.config to block the files.
Secondly, while you could use the Secure Extranet Folder feature built into Dynamicweb, I don't think it would solve all your problems. It only allows for a single secured folder and you would have to assign all customers to have access. Which defeats the purpose of having their own segregated folders.
Thirdly, the FilePublisher module is used to publish lists of files in the Files folder, but it doesn't support conditional base paths. What I mean is that while it can show a list, you cannot change the folder it lists based on the current user.
The isn't really anything suitable that comes with Dynamicweb out-of-the-box that fits the request. My recommendation would be to create it from scratch. You could have a separate folder outside the Files folder and block it in Web.config. That way no one can access those files without using your mechanisms.
I hope this helps you to find a solution.
- Jeppe
