With Drupal 8/9 I want to:
- Have a private file folder
- Upload files to it (ideally by whatever method but media type will do)
- Allow only authenticated users (ideally set by role) to view the file (whether by direct link or link in WYSIWYG editor)
Why does this seem to be so hard? Am I missing something?
When I set up private files using the online documentation I can find it either blocks everyone but the Admin from seeing the direct link or allows anonymous users to view the link even if the private files folder is outside the webroot. There seems to be no fine-grained control of permissions.