We want to add some file fields to individual contacts for PDF documents. Is there a way to store these files so that they can be accessed by a Civicrm user with appropriate permissions but not reachable on the web site otherwise - including by a search bot or similar agent that may ignore a robots.txt instruction? I realize this question may go beyond Civicrm configuration to web server security in general but hoping someone can point me in the right direction. My civicrm is running on WordPress on Ubuntu. Thanks.

1 Answer 1


There is a special permission for accessing user file uploads in CiviCRM. You can turn this off for Anonymous user and I believe your files won't be accessible for Anonymous users.

enter image description here

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.