Closed (works as designed)
Project:
Nodeaccess
Version:
7.x-1.x-dev
Component:
Code
Priority:
Normal
Category:
Feature request
Assigned:
Unassigned
Reporter:
Created:
4 Jul 2012 at 08:11 UTC
Updated:
22 Feb 2015 at 11:00 UTC
Jump to comment: Most recent
Comments
Comment #1
vlad.pavlovic commentedNo, unfortunately, this is the logical way for Nodeaccess to work. If a file is private and the user doesn't have access to the node in question, they should not have access to any attachments that belong to the node. Sorry.
Comment #2
mirko@le-dot.com commentedhi
we installed the module, and it does exactly what it said. that's the good part.
now we have the same issue regarding file access. the node includes a file field, which then gives the link to the file, placed in private folder outside root.
when going to the frontend, the node access works like it should, just the file can be still accessed trough a direct link.
as i unpublish the node, the file is not accessible anymore (so i guess the private file folder works properly). it seems to me that the file acess is not precessed trough the module.
i've found a solution for a earlier version (https://www.drupal.org/node/278791) but don't know really how to implement it. it seems like an additional module is needed?
Comment #3
fluxline commentedi don't think the original post was answered, and I have the same question but i'll put it another way.
- a node is created that has a file attached that is stored in the private file system, with nodeaccess settings correctly enabled (assumed)
- the author of the node grants access to another user giving them view access.
- the user with the new grant to view the node cannot view the attached document.
would it be possible to set that if a user is granted view access that they can also see attached documents in the private file system?
thx for any help
Comment #4
fluxline commentedComment #5
fluxline commentedmy bad, in testing i'd also tried the field permissions module and on the field made it visible only to admin and author. all is at should be.
Comment #6
fluxline commented