Media File Privacy

Drupal 10/11 module providing two Media actions:

1. Move unpublished media files to private storage

   • Runs only on unpublished Media entities.
   • Moves a source file only when its URI begins with public://.
   • Example: public://2026-08/example.jpg -> private://2026-08/example.jpg.

2. Move published media files to public storage

   • Runs only on published Media entities.
   • Moves a source file only when its URI begins with private://.
   • Example: private://2026-08/example.jpg -> public://2026-08/example.jpg.

Installation

Place the module at:

web/modules/custom/media_file_privacy

Enable it:

drush en media_file_privacy -y
drush cr

The actions should then be available to Media Views Bulk Operations / the standard Views bulk form, depending on the View configuration.

Collision handling

If a file already exists at the destination URI, the action logs an error and does not overwrite or rename either file. Errors are written to the media_file_privacy log channel.

Private file system

Drupal must have a working private file path configured, for example in settings.php:

$settings['file_private_path'] = '/var/www/site-files/private';

The directory must be writable by the web/PHP user.

Node action

The module also provides Move associated unpublished media files to private storage as a node action. For each selected node it finds media whose field_media_of references that node and applies the existing media_file_privacy_move_unpublished_private media action to each accessible media item.

The module also provides Move associated published media files to public storage as a node action. For each selected node it finds media whose field_media_of references that node and applies the existing media_file_privacy_move_published_public media action to each accessible media item.