If you're using the public file system (at admin/settings/file-system) anyone with the url can download the files. If you want to protect files while not switching the entire file system to private (recommended, since there are side effects to using the private file system), see http://drupal.org/node/189239 or search the module repository-- there are a couple of modules that address this need as well. I use the method outlined in the post, and it works great.
=-=
cck field permissions, enable in administer -> modules
I have already
Sorry, I have already configured cck field permissions but if I access through url, I can download or I can view the file.
_
If you're using the public file system (at admin/settings/file-system) anyone with the url can download the files. If you want to protect files while not switching the entire file system to private (recommended, since there are side effects to using the private file system), see http://drupal.org/node/189239 or search the module repository-- there are a couple of modules that address this need as well. I use the method outlined in the post, and it works great.
_
Don't be a Help Vampire - read and abide the forum guidelines.
If you find my assistance useful, please pay it forward to your fellow drupalers.