Media Access Control Guidelines for Administrators

This guide explains how to correctly upload media files within the platform to ensure appropriate access control is applied. Selecting the correct upload method determines whether a file is publicly accessible or restricted to authenticated users.

Administrators are responsible for ensuring files are uploaded to the correct location based on their intended visibility.

Public Files (Website / Open Access)

Use this method only when the file is intended to be publicly accessible.

Examples:

• Brochures

• Marketing PDFs

• Public guides

• Website download resources

How to upload:

1. Log in as Admin.

2. Navigate to Admin → Media.

3. Select Upload and add the file.

Files uploaded in this area are treated as public media.

Access behaviour:

• These files are configured as public.

• They are accessible via the frontend media endpoint.

• They may be accessed directly if linked from a public page.

Important:
Do not upload invoices, internal documents, private course materials, or restricted content here.

Private / Restricted Files (Course Content Only)

Use this method when the file must only be available to authorised users.

Examples:

• Course materials

• Delegate resources

• Internal documentation

• Restricted training content

How to upload:

1. Log in as Admin.

2. Navigate to Courses.

3. Open the relevant Course or Schedule.

4. Go to the Content tab.

5. Upload the file within this section.

Files uploaded through the Course / Schedule content area are treated as restricted.

Access behaviour:

• These files are not served via the public media endpoint.

• Direct public access is blocked.

• Access is only available within authenticated course context.

Schedule note uploaded documents are public - do not upload private information here. Suggestion - Use the course content to share private information

Access Control Overview

Public Media:

• Intended for open distribution.

• Accessible via frontend endpoint.

• Should contain no sensitive or restricted information.

Restricted Media:

• Not publicly accessible.

• Requires authenticated access.

• Used for course-specific or private materials.

Administrator Responsibility

Before uploading any file, confirm:

• Is this file intended for public access?

• Does this file contain sensitive or restricted information?

• Should this file only be visible to enrolled delegates?

Uploading files to the incorrect location may result in unintended exposure.

If there is any uncertainty regarding classification, contact support before uploading.