Answers.Body: <p>There is a special permission for accessing user file uploads in CiviCRM. You can turn this off for Anonymous user and I believe your files won't be accessible for Anonymous users.</p>
  
  <p><a href="https://i.sstatic.net/Yj9tJ.png" rel="nofollow noreferrer"><img src="https://i.sstatic.net/Yj9tJ.png" alt="enter image description here"></a></p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2018-08-14T15:01:39.497Z
Answers.LastActivityDate: 2018-08-14T15:01:39.497Z
Answers.UserDisplayName: Pradeep Nayak
Body: <p>We want to add some file fields to individual contacts for PDF documents.  Is there a way to store these files so that they can be accessed by a Civicrm user with appropriate permissions but not reachable on the web site otherwise - including by a search bot or similar agent that may ignore a robots.txt instruction?  I realize this question may go beyond Civicrm configuration to web server security in general but hoping someone can point me in the right direction. My civicrm is running on WordPress on Ubuntu.  Thanks. </p>
  
Tags: <security><attachments>
Title: Secure storage for file attachments
ThreadText: # Secure storage for file attachments
  
  (Asked by: username_0 on 2018-08-14)
  
  We want to add some file fields to individual contacts for PDF documents. Is there a way to store these files so that they can be accessed by a Civicrm user with appropriate permissions but not reachable on the web site otherwise - including by a search bot or similar agent that may ignore a robots.txt instruction? I realize this question may go beyond Civicrm configuration to web server security in general but hoping someone can point me in the right direction. My civicrm is running on WordPress on Ubuntu. Thanks.
  
  **Tags:** security, attachments
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2018-08-14. Score: 1
  
  There is a special permission for accessing user file uploads in CiviCRM. You can turn this off for Anonymous user and I believe your files won't be accessible for Anonymous users.
  
  [![enter image description here](https://i.sstatic.net/Yj9tJ.png)](https://i.sstatic.net/Yj9tJ.png)
  
  
  ---
  
  