I believe these are 2 different categories of permissions:
1.) "Public download"
2.) "Role view/download", "Role attach", "Role full access"

Is it correct that "Public download" sets a site-readers permission on attachments to a node, while "Role..." sets permissions within the WebFM browser?

(If it is so, the combined list in the permissions-popup caused some confusion.)

Thank you in advance!

Comments

robmilne’s picture

robmilne commented

The permissions ajax window (context menu) sets the access rights to a file within the webfm module browser UI. Attachments of files to nodes is always possible for the owner of the file, administrators and any non-admin user who can view the file via the browser AND the file has the "Role Attach" attribute checked. Once a file is attached the rights to accessing it is purely a node access issue - if a user can access a node that a particular file is attached to then he/she can download the file. The "Public download" right controls webfm_send links outside of attachments (ie: <img src="/webfm_send/42" /> in the body of a node). I know this scheme isn't perfect but I'm not changing it.

robmilne’s picture

robmilne commented
Status: Active » Closed (works as designed)
blogbold’s picture

blogbold commented

Ah, now I understand, thanks!