Making Assets Private

If assets are set to private, they are handled like other private content with one important exception: Unless you follow the procedure described below, anyone can access an asset by typing the URL of the asset into the browser’s address field.

If a user attempts to access the asset in any other way (such as, linking to it from a Web page), the regular methods of making content private work. See Making a Folder Private and Making Content Private.

To make assets private even if someone types their URL into the browser’s address field, follow these steps.

Note: If site users receive a 404 Page Not Found error when trying to view private assets, make sure you have completed all steps below.

1. Open your Web site’s web.config file, located in the site root folder.

2. Make sure the following line is uncommented.

3. Comment out the eight lines indicated below.

<!--<add verb="GET,POST" path="*.doc" type="Ektron.ASM.EkHttpDavHandler.EkDavHttpHandlerFactory"/>

Eight add verb statements in the middle are commented out.

4. Make sure the following line is uncommented.

5. Save web.config.