A visitor may be allowed to read a PDF without being allowed to download it. That distinction matters more than many WordPress sites realize.
Reading supports evaluation. Downloading gives the file a longer life outside the page. For manuals, member resources, proposals, paid guides, and protected documents, those two actions deserve separate rules.
Start with the access model
Before changing plugins or settings, write down who should be able to view the PDF and who should be able to download it. Public visitors, subscribers, customers, team members, clients, and administrators may all need different access.
| Use case | Possible access rule |
|---|---|
| Product manual | Everyone can view, customers can download. |
| Lead magnet | Public can preview, subscribers can download. |
| Course workbook | Members can view and download after login. |
| Proposal | Specific client can view, download may be disabled. |
| Internal guide | Team roles can view, public visitors see a fallback. |
Use friendly fallbacks
Restricted content should not feel broken. If a visitor cannot view or download a PDF, show a clear message and next step. That might be a login link, signup page, purchase page, or contact form.
A helpful fallback preserves trust. A blank viewer or failed download creates confusion.
Keep the file source in mind
PDFs stored in the WordPress Media Library can usually support stronger site-level handling than random external file links. PDF Viewer Nova uses its signed, time-limited delivery model most effectively for Media Library PDFs that resolve to attachment IDs. Public external PDFs can still be displayed, but restricted external URLs do not get the same signed-delivery protection.
Make the rule feel human
PDF Viewer Nova lets WordPress sites handle viewing and download access as separate decisions. The friendlier version is the important part: a restricted visitor can see a preview, lock message, popup, or redirect instead of landing on a broken-looking file.
Better PDF control is not about making content difficult to access. It is about matching access to the promise of the page, then giving every visitor a clear path forward.
