Access Control

Customer Documents controls access per document using:

• Public access (is_public)
• Customer assignments (specific customer IDs)
• Customer group assignments

The effective rule is:

• If is_public = 1 → access is allowed.
• Otherwise, the customer must be logged in and either:
  • explicitly assigned to the document, or
  • in an assigned customer group.

Where To Configure It

Admin:

• Customers >Customer Documents > All Documents

On each document you can configure:

• customers
• customer groups
• public access
• validity (valid_from / valid_to)
• max downloads
• password (optional)

Website Scope

Each document is stored with a website_id. In the frontend list, documents are filtered to:

• website_id = 0 (all websites) or
• the current website id

Public Links vs “My Documents”

There are two different download flows:

“My Documents” (customer account)

• Requires login.
• Uses customerdocuments/index/checkdownload (AJAX) and customerdocuments/index/downloadfile.

Public download link

• Only works for documents with Is Public = Yes.
• Uses customerdocuments/download/file?id= (optionally &password=...).

See: Downloads & Security