I don't know if this is the right place for this post. (I did not see a more appropriate forum.)

The Security Settings in File Manager do not apply to url's. For example, if you create a folder "Portal  Root\Private" and set it for Registered Users it does not prevent a url from accessing the file. ie:

   http://www.mydomain.com/portals/3/private/myfile.pdf

You could protect the files by removing the Read property for the folder in IIS Manager; however, this would have to be done on every web site entry in IIS. And, the host manager would be responsible for making theses settings on every portal alias for all the portals that have protected directories.

Is there another way to secure files so DNN can access them based on security settings and prevent direct url access to these files?