How to show a particular asset to only logged in users ?

Forum|Forum|2 years ago
February 3, 2023
4 replies
1343 views

I have some assets in a particular folder in dam. Now all the assets in this folder should be read by only logged in users. It is an e-commerce site and if a seller logs in only then he /she can access and download these assets. How do I implement that ?

Currently if we somehow get the access of the link to that asset and paste it in a browser, anyone can access it and download it too. I want to stop this thing from happening.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

Best answer by arunpatidar

You have to use CUG to restrict the assets and Permission sensitive caching to avoid download from dispatcher cached. (You no need to cache at CDN)

We have already implemented same for pages and assets.

Let me know if you need help.

Umesh_Thakur

Community Advisor

You just need to check the present session for the user, as you mentioned that there is a way to login in your application, then definitely there will be a session or token for the logged-in user. just check the session in the component and based on the session availability, show or hide the link or asset frame.

Hope this help.

Umesh Thakur

Ankan_GhoshAuthor

Level 3

This thing is already implemented . If the user logs in then only the download/read is possible . But if the we copy the link of that asset from our dam and paste in a browser window where we are not logged in , it is still accessible . The client wants to stop this from happening .

Himanshu_Jain

Community Advisor

You can try for CUG implementation for that folder. Keep it restricted to a specific group and add users accordingly in that group.

Ref: https://experienceleague.adobe.com/docs/experience-manager-learn/assets/advanced/closed-user-groups.html?lang=en

Himanshu Jain

krishna_sai

Community Advisor

Hi @ankan_ghosh
you can try applying closed user groups to the folder which you want to authenticate and also provide login URL so that when we try hitting asset directly it might redirect you to login page.

Hope this helps
Thanks,
Krishna