[GH-ISSUE #825] Skipping login form for public users (but Admininstrator needs to log in to manage files) #555

New issue

Closed

opened 2026-03-02 15:59:44 +03:00 by kerem · 2 comments

kerem commented

2026-03-02 15:59:44 +03:00

Owner

Originally created by @mrlawrencelam on GitHub (Jul 20, 2022).
Original GitHub issue: https://github.com/prasathmani/tinyfilemanager/issues/825

What I want:

The Administrator must log in to manage files.
Public users can only VIEW and DOWNLOAD files. They can't manage files.
Public users DO NOT need to log in (skip the login form). They can go directly to the file list.

I tried pointing to the URL */tinyfilemanager.php?fm_usr=user&fm_pwd=user123 but it didn't work.

Originally created by @mrlawrencelam on GitHub (Jul 20, 2022). Original GitHub issue: https://github.com/prasathmani/tinyfilemanager/issues/825 What I want: 1) The Administrator must log in to manage files. 2) Public users can only VIEW and DOWNLOAD files. They can't manage files. 3) Public users DO NOT need to log in (skip the login form). They can go directly to the file list. I tried pointing to the URL */tinyfilemanager.php?fm_usr=user&fm_pwd=user123 but it didn't work.

kerem closed this issue

2026-03-02 15:59:45 +03:00

kerem commented

2026-03-02 15:59:45 +03:00

Author

Owner

@phken91 commented on GitHub (Jul 21, 2022):

hi @mythsmith ,
In your situation, it would be preferable to have a different page where the file is shown or listed to allow for public download.

@phken91 commented on GitHub (Jul 21, 2022): hi @mythsmith , In your situation, it would be preferable to have a different page where the file is shown or listed to allow for public download.

kerem commented

2026-03-02 15:59:46 +03:00

Author

Owner

@mrlawrencelam commented on GitHub (Jul 21, 2022):

Thanks for the hint.

I have just duplicated the script and renamed it view.php. I turn auth to OFF. But viewers, when arriving at the main file list, have the power to manage files. I guess I have to manually remove the codes for DELETE, RENAME, UPLOAD , SETTING etc. I wonder why users still have the power to manage files when global read-only is turned ON.

@mrlawrencelam commented on GitHub (Jul 21, 2022): Thanks for the hint. I have just duplicated the script and renamed it view.php. I turn auth to OFF. But viewers, when arriving at the main file list, have the power to manage files. I guess I have to manually remove the codes for DELETE, RENAME, UPLOAD , SETTING etc. I wonder why users still have the power to manage files when global read-only is turned ON.