I´ve setted the Disknode download capability at the access control area, to be available only for registered users.
Annonymous users cannot do anything.

create directory
create disknode
delete files
download files
edit own disknodes
escape user directory
cargar archivos

But annonymous users can access and normally download the disknode attachments!

Is this a bug or maybe I´m missing something at the configuration?

Thanks in advance!!

Rosamunda

Comments

elmuerte’s picture

elmuerte commented

You must set the download method to private ( this is done in admin/settings )

Rosamunda’s picture

Rosamunda commented

it is setted to private method... and people keeps downloading...

elmuerte’s picture

elmuerte commented

Then you have an other module installed that does allow downloading of files, if one module permits downloading a second can't deny it. This is a "feature" of drupal.

Rosamunda’s picture

Rosamunda commented

Yes, I´ve installed upload, attachment and filemanager module.
But I´ve now deactivated all of them and the problem keeps appearing... Should I delete them using FTP?

elmuerte’s picture

elmuerte commented

no you don't have to delete the modules. if they are disabled they have no effect

samc’s picture

samc commented
Priority: Normal » Critical

I'm having the same problem with DiskNode 4.7 and Drupal 4.7.2.

I've also got the SimpleAccess and LoginToboggan modules installed, but these seem to be configured fine to support and protect other node types.

elmuerte’s picture

elmuerte commented
Assigned: Unassigned » elmuerte
Status: Active » Closed (fixed)

not an issue with disknode, but caused by other modules and drupal it self.

Other modules that implement hook_file_download and return false when they not allow the download of the file actually cause the file to be downloaded since the resulting array of headers will have an entry. I can not explicitly deny downloading of files because there is not proper way for validating if the file is only used for a disknode.
Bug followup: http://drupal.org/node/78721

samc’s picture

samc commented

In case this helps someone, Flexinode is a known offender. A patch is in the works:

http://drupal.org/node/64573