PHPackages                             saccilottoconsulting/craft-internal-assets - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. saccilottoconsulting/craft-internal-assets

ActiveCraft-plugin

saccilottoconsulting/craft-internal-assets
==========================================

A simple plugin to restrict access to assets for permitted users only. Access to a given asset is only granted if the user has view-permissions for the given source (this can be set in the user- or group-settings). The asset source folder should be moved out of the web root folder so the files are never accessible without this plugin.

4.1.2(2y ago)353.5k8[3 issues](https://github.com/tikiatua/internal-assets-plugin/issues)MITPHPPHP ^8.0

Since Jul 4Pushed 1y ago3 watchersCompare

[ Source](https://github.com/tikiatua/internal-assets-plugin)[ Packagist](https://packagist.org/packages/saccilottoconsulting/craft-internal-assets)[ RSS](/packages/saccilottoconsulting-craft-internal-assets/feed)WikiDiscussions craft4 Synced 3d ago

READMEChangelog (8)Dependencies (1)Versions (8)Used By (0)

Internal Assets plugin for Craft CMS 4.x / 5.x
==============================================

[](#internal-assets-plugin-for-craft-cms-4x--5x)

A simple plugin to restrict access to assets for permitted users only. Access to a given asset is only granted if the user has view-permissions for the given source (this can be set in the user- or group-settings).

The asset source folder should be moved out of the web root folder so the files are never accessible without this plugin.

Requirements
------------

[](#requirements)

This plugin was tested with Craft CMS Version 4.4 and Version 5.0.4

Installation
------------

[](#installation)

To install the plugin, follow these instructions.

1. Open your terminal and go to your Craft project:

    ```
     cd /path/to/project

    ```
2. Then tell Composer to load the plugin:

    ```
     composer require saccilottoconsulting/craft-internal-assets

    ```
3. In the Control Panel, go to Settings → Plugins and click the “Install” button for Internal Assets.

Internal Assets Overview
------------------------

[](#internal-assets-overview)

The plugin installs a custom url matcher, which captures all requests on /internal/\*. The request is then checked against all volumes to which the current user has view access. A 401 error (unauthorized) will be returned, if the user is not logged in or does not have access to the given volume.

Matching of the volume is perfomed by comparing the url with the public path of the file system of the volumes that the user has access to.

If the file is found, then the contents of the file are streamed to the client. Otherwise a 404 error (not found) is returned.

Configuring Internal Assets
---------------------------

[](#configuring-internal-assets)

There are currently no configuration options for the plugin. However, you need to enable publicPaths on the filesystem that you want to use and prefix the url path with /internal, e.g. /internal/assets

Internal Assets Roadmap
-----------------------

[](#internal-assets-roadmap)

The following additional features are currently planned

- Allow the use of image transformations on assets (currently not supported)
- Enable custom path prefixes for internal assets
- Support mp4 files on mobile devices

Brought to you by [Ramon Saccilotto](https://github.com/tikiatua)

###  Health Score

39

—

LowBetter than 86% of packages

Maintenance25

Infrequent updates — may be unmaintained

Popularity29

Limited adoption so far

Community16

Small or concentrated contributor base

Maturity72

Established project with proven stability

 Bus Factor1

Top contributor holds 90.2% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~353 days

Recently: every ~328 days

Total

7

Last Release

752d ago

Major Versions

2.3.2 → 4.0.02023-03-08

### Community

Maintainers

![](https://avatars.githubusercontent.com/u/1379175?v=4)[Ramon Saccilotto](/maintainers/tikiatua)[@tikiatua](https://github.com/tikiatua)

---

Top Contributors

[![tikiatua](https://avatars.githubusercontent.com/u/1379175?v=4)](https://github.com/tikiatua "tikiatua (37 commits)")[![spharion88](https://avatars.githubusercontent.com/u/900670?v=4)](https://github.com/spharion88 "spharion88 (2 commits)")[![jooosh](https://avatars.githubusercontent.com/u/356481?v=4)](https://github.com/jooosh "jooosh (1 commits)")[![mckenzieclark](https://avatars.githubusercontent.com/u/25327?v=4)](https://github.com/mckenzieclark "mckenzieclark (1 commits)")

---

Tags

cmsassetsCraftcraftcmscraft-pluginaccess restriction

### Embed Badge

![Health badge](/badges/saccilottoconsulting-craft-internal-assets/health.svg)

```
[![Health](https://phpackages.com/badges/saccilottoconsulting-craft-internal-assets/health.svg)](https://phpackages.com/packages/saccilottoconsulting-craft-internal-assets)
```

###  Alternatives

[nystudio107/craft-seomatic

SEOmatic facilitates modern SEO best practices &amp; implementation for Craft CMS 5. It is a turnkey SEO system that is comprehensive, powerful, and flexible.

1741.4M46](/packages/nystudio107-craft-seomatic)[verbb/image-resizer

Resize assets when they are uploaded.

127269.1k7](/packages/verbb-image-resizer)[verbb/tablemaker

Create customizable and user-defined table fields.

40168.8k1](/packages/verbb-tablemaker)[verbb/hyper

A user-friendly links field for Craft.

24130.9k9](/packages/verbb-hyper)[acclaro/translations

Easily launch and manage multilingual Craft websites without having to copy/paste content or manually track updates.

1229.5k](/packages/acclaro-translations)[verbb/footnotes

Adds a footnotes feature to CKEditor fields and Twig templates.

213.3k](/packages/verbb-footnotes)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)
