this.userId or this.user() is always null in protected function

Hello, I would like to protect the files from being accessible by a non-connected user. At the moment anyone can do : http://my-app.com/cdn/storage/Files/fileId/original/fileId.pdf and the file is presented to the browser (even if the user is not connected)

I have implemented :

configServer["protected"] = function(fileObj){
    console.log("protected > this.userId : ", this.userId); //This returns always null
    if (this.userId){return true;}
    return false
  }

But this.userId or this.user() always return null.

I am using v 1.11.2. with Meteor 1.8.1

I am both :

• accessing with direct link : http://my-app.com/cdn/storage/Files/fileId/original/fileId.pdf
• accessing inside the Meteor webUI using fileObj.link()

Is this a normal behavior ? I have seen some discussion about taking the userId from cookies. Do I have to activate/set cookies somewhere before in my app or MeteorFiles is doing it ? Thanks

Similar issues :

• https://github.com/VeliovGroup/Meteor-Files/issues/692
• https://github.com/VeliovGroup/Meteor-Files/issues/642

[dokithonon]

Hello, We did together place account-base above ostrio:files in the meteor/package files. But I had other sub packages that were using ostrio:files like this : api.use(['ostrio:files]) and these packages did not have account-base declared above. I have replaced by api.use(['account-base', 'ostrio:files']) and it seems to work. I will try and make tests beginning of january and let you know. Thanks and have a nice Christmas.

[dokithonon]

Yes. account-base should be before ostrio:files also in subpackages. Thanks for your help.