The database queries ignore node access rules. When using "node privacy byrole", the img_assist module can be used to bypass node permissions on images. Attached is a simple patch that seems to work for me (not extensively tested)

CommentFileSizeAuthor
patch_64.36 KBAnonymous (not verified)

Comments

matt westgate’s picture

matt westgate commented

I've fixed this problem for the 4.6 release.

Anonymous’s picture

(not verified) commented