? .DS_Store
? .cache
? .project
? .settings
? empty
? logs
? modules/.DS_Store
? modules/im
? modules/imagemagick
? sites/all/modules
? sites/default/files
? sites/default/settings.php
Index: modules/upload/upload.module
===================================================================
RCS file: /cvs/drupal/drupal/modules/upload/upload.module,v
retrieving revision 1.200
diff -u -p -r1.200 upload.module
--- modules/upload/upload.module	14 Apr 2008 17:48:43 -0000	1.200
+++ modules/upload/upload.module	15 Apr 2008 21:07:13 -0000
@@ -148,12 +148,12 @@ function _upload_file_limits($user) {
  * Implementation of hook_file_download().
  */
 function upload_file_download($file) {
-  if (!user_access('view uploaded files')) {
-    return -1;
-  }
   $file = file_create_path($file);
   $result = db_query("SELECT f.* FROM {files} f INNER JOIN {upload} u ON f.fid = u.fid WHERE filepath = '%s'", $file);
   if ($file = db_fetch_object($result)) {
+    if (!user_access('view uploaded files')) {
+      return -1;
+    }
     return array(
       'Content-Type: ' . $file->filemime,
       'Content-Length: ' . $file->filesize,