A Nextcloud-style document portal for clubs and associations. Upload, organise and manage files with role-based access and soft-delete trash.

kistenstein

Kistenstein Club Document Portal turns any WordPress page into a fully functional document management portal — perfect for associations, clubs, sports teams and small organisations that need to share files with their members.
<h4>Key Features</h4>
<ul>
<li>Nextcloud-style file explorer — folder navigation with breadcrumb trail</li>
<li>Upload — button and drag-and-drop from desktop</li>
<li>PDF preview — inline browser preview via modal iframe, no download required</li>
<li>Drag-and-drop move — drag files or folders onto other folders or breadcrumb items to move them</li>
<li>Folder management — create, rename and delete folders</li>
<li>File management — rename and delete (soft-delete) files</li>
<li>Soft-delete trash — deleted items are kept for a configurable retention period (default 180 days)</li>
<li>Admin trash view — restore or permanently delete items; configurable retention directly in the trash panel</li>
<li>Three protection modes per area — choose for every area whether it is public, restricted to a WordPress role/group, or unlocked with a shared password</li>
<li>Upload permissions by role — define which WordPress role may upload, rename and delete files</li>
<li>Secure file delivery — all files are streamed through WordPress, and the upload folder is blocked from direct HTTP access, so protected files cannot be downloaded by guessing their URL</li>
<li>Page password manager — editors can view and update the shared password of a password-protected page directly inside the portal (optional)</li>
<li>Fully translatable — every string uses the <code>kistenstein-club-document-portal</code> text domain; the interface follows each user’s WordPress language</li>
</ul>
<h4>How access protection works</h4>
When you set up an area in the wizard you pick one of three modes:
<ul>
<li>Everyone (public) — anyone, including logged-out visitors, can view and download the files.</li>
<li>Only a specific role / group — only logged-in users who hold the chosen WordPress role can open the area. Each member needs their own WordPress account. Best when you want individual accounts (e.g. a board with named members).</li>
<li>Shared password — the area’s page is protected with WordPress’ built-in page password. Everyone uses the same password — no individual accounts needed. Best for a members’ area where you simply hand out one password.</li>
</ul>
In every case files are delivered through WordPress and the storage folder is protected from direct access, so the chosen rule is always enforced — not just hidden in the listing.
<h4>Shortcodes</h4>
<pre><code>[kcdp_explorer folder="documents"]
</code></pre>
Renders a file explorer for the named sub-folder. The area’s protection mode is configured in the setup wizard.
<pre><code>[kcdp_explorer folder="members" manage_password="1"]
</code></pre>
Adds a shared-password manager panel for editors (requires the Password-Protected Page ID to be set in Settings → File Portal).
<pre><code>[kcdp_trash]
</code></pre>
Trash view with restore and permanent-delete actions. Visible to administrators only.
<pre><code>[kcdp_audit]
</code></pre>
Audit log of all file actions (upload, download, delete, restore …). Visible to administrators only.
<h4>Configuration</h4>
<ol>
<li>After activation you are taken to File Portal → Set Up.</li>
<li>Tick the areas your association needs, name each page, and choose how each area is protected (public, role or shared password).</li>
<li>Pick which role may upload and manage files.</li>
<li>Save — the pages are created automatically. Add <code>[kcdp_trash]</code> to a restricted admin page to manage deleted files.</li>
</ol>
<h4>Server requirements for protected areas</h4>
Protected files are blocked from direct download with an <code>.htaccess</code> file written into the upload folder. This is honoured by Apache and LiteSpeed. If you run nginx, add an equivalent rule that denies direct access to the portal’s upload folder (e.g. <code>location ^~ /wp-content/uploads/file-portal/ { deny all; }</code>), so that protected files are only reachable through the plugin.
<h4>Privacy</h4>
When a file is deleted, the following metadata is stored in a trash index file on the server: the original file path, the WordPress user ID and display name of the user who deleted it, and the timestamps for deletion and scheduled expiry. The audit log additionally records, per action, the acting user, a timestamp and the request IP address. This data is stored only on your server and is never transmitted off-site.

Alternatives to Kistenstein Club Document Portal

Top alternatives