I'm installing this module and all seems to work pretty good so far. The only issue I have is the views created by download count. There's no access restrictions so if a user neglects to secure or disable these views, they'll be sharing information that they might rather be kept private. I assumed this would be private because there are permissions for accessing the statistics and I thought the views would use this permission.

Easiest solution for most users would be to set the access restrictions on the view to limit access to only users with the permission "view download count statistics". Barring that, a readme file in the module letting users know what pages the module creates would be beneficial.

Comments

WorldFallz’s picture

WorldFallz commented

see #1143696: File downloads showing up for anonymous user role

afaict, no other module provided views work like this-- they all leave the view unrestricted and depend on the user installing the module to set view access as desired. However, I think it will be better to set the views to be disabled initially and add a message that displays when the module is enabled (it's also on my to do list to create a readme for this module and i'll add it there as well).

thanks for the feedback.

WorldFallz’s picture

WorldFallz commented
Status: Active » Fixed

ok, changes committed.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

rmcom’s picture

rmcom commented
Status: Closed (fixed) » Needs review

I installed a 6.2 and the views at

  • /file_downloads
  • /individual_file_downloads

are still set to "unrestricted"

WorldFallz’s picture

WorldFallz commented
Status: Needs review » Closed (works as designed)

read the issue please