I tried to set custom field permissions for a file field and while the file link on the node disappeared for roles without access, I was still able to get to the file directly by inputting the URL to the file path. Site is configured with "Private local files served by Drupal." And this file field is set with an upload destination of "private files".

Am I missing something?

Comments

jaymcgraw’s picture

Status: Active » Closed (works as designed)

Disregard this. Found a configuration setting with the IMCE module that was trumping private file restrictions.

pminf’s picture

@jaymcgraw: Same issue here. Could you please explain your settings (especially for IMCE) in detail? Thank you.