Moshe,
On a stock drupal 460 and Og latest release, using stock upload module and download method sets to private I found that a user can't download a file if he doesn't have "administer node" access right. See below the error message for an anonymous user trying to download a file :

Unknown table 'na' in where clause query: SELECT DISTINCT(f.nid), f.* from files f WHERE (na.grant_view = 1 AND CONCAT(na.realm, na.gid) IN ('all0','og_uid0','og_group0')) AND filepath = 'files/Feuille_activites.xls' in /var/www/drupal-4.6.0/includes/database.mysql.inc on line 66.

That is to say anonymous user who are seeing a public post can't download the attachment, and neither can do normal registred user without the upper access right "administer node". This is very critical.

Hope, you could help, thanks,
eric

Comments

ec’s picture

ec commented

After some more testing, it appears that this only occurs when private download is check ! Any idea ? Regards.

ec’s picture

ec commented

Moshe, it appears that this problem is related to the upload.module a patch is available here http://drupal.org/node/22723 so I change the status to closed. Regards, Eric.