I'm new to Moodle, and I love almost everything about it so far. There's one part that makes me a bit uncomfortable, though... why is it that I can:
- Add a "file" activity to a course, and upload a file for students to access (in my case, a PDF)
- Test the link to the file by clicking on it in the course myself
- Copy the URL to the file (ending in .pdf)
- Use the browser back button to return to the course
- Log completely out of Moodle
- Open a new browser tab
- Paste the URL (.pdf) that I copied in step 3 into the new tab
- And viola, the file opens right up, visible to anyone in the world who has the link, logged into Moodle or not. ... ???
My files that I share with paying students are proprietary, under copyright, and supposed to only be accessible to those students. Why is it that only they can access the course (by logging in and being enrolled), but the actual PDFs that I provide to them are essentially available to anyone in the world?
I saw this issue in another LMS, which is why I eventually abandoned it. I have a feeling, though, that Moodle is above this. My hunch is that there's a setting somewhere which limits access to those files to only students who are enrolled in the course... I just don't know where. I looked in the documentation and forums but I'm not finding any info.
Does anyone know how to fix this? Is there perhaps a setting, or a plugin, I need to know about?
Thanks in advance!