Hello,
I use the private file system and I have a problem with links to download files.
The problem is visible in a view that lists the files (see picture).
With the user 1 account I can download only the latest uploaded file. Other files display an access denied.
After checking the download links I see that the token placed in the url is still the same.
First link : ...mysite.com/file/4/download?token=enMYyAfPORkgsmtSISmolXmfaw2C2A1ZiN1XZTCXbvY
Second link : ...mysite.com/file/3/download?token=enMYyAfPORkgsmtSISmolXmfaw2C2A1ZiN1XZTCXbvY
Third link : ...mysite.com/file/2/download?token=enMYyAfPORkgsmtSISmolXmfaw2C2A1ZiN1XZTCXbvY
...
This token is the problem?
Have you encountered this problem? Thank you for your help.
The following modules are installed:
Views 7.x-3.7
ctools 7.x-1.3
admin views 7.x-1.2
File entity 7.x-2.0-alpha2
entity 7.x-1.2
VBO 7.x-3.1
Comments
Comment #1
kumkum29 CreditAttribution: kumkum29 commentedHello,
if I change the view display (table) to unformatted list + file display, download links are ok.
I see that the token placed in the link is different from one file to another.
The table view display created always the same token. The problem comes from the token.
I hope this help you to understand the problem.
Thanks
Comment #2
manicato CreditAttribution: manicato commentedI have the same problem:
/file/2609 > I have access to the file
/file/2609/download > Access denied
Comment #2.0
manicato CreditAttribution: manicato commentedrev2
Comment #3
rafal.cygnarowski CreditAttribution: rafal.cygnarowski commentedThis is File entity module problem and IMHO should be fixed.
Following patch is a temporary solution:
Comment #4
ericwongcm CreditAttribution: ericwongcm commented#3, thanks
Your code change fixed the same problem I am experiencing :)
Comment #5
puppyman CreditAttribution: puppyman commented#3 worked for me as well. Thanks. This appears to be an issue with private and public file downloads via views.
Comment #6
shrop CreditAttribution: shrop commentedI can confirm the same issue as kumkum29 in #1.
In addition, the issue persists for me for uid1 and other authenticated users who should have access.
I was able to get around this by rewriting the download link with the filename, but having a token is really the best approach and I would like to get that going again.
Comment #7
rudiedirkx CreditAttribution: rudiedirkx commented#3 works. Pretty big bug IMO. I'm making a patch.
Comment #8
rudiedirkx CreditAttribution: rudiedirkx commentedThis is a File Entity issue, not Drupal Core.
Comment #9
rudiedirkx CreditAttribution: rudiedirkx commentedConfirmed in alpha3. Not yet in beta1 or dev.
Comment #10
rudiedirkx CreditAttribution: rudiedirkx commentedFixed in beta1, so closing.
Comment #11
nelslynn CreditAttribution: nelslynn commented#3 is not in Beta2... not sure if it should be, and sorry for reopening this if is should not be. None the less, applying #3 to beta2 does not help in my situation... see below
Since upgrading the to latest Drupal Core 7.43, I get access denied on all private files; user 1 and all other roles with permissions to download cannot download private files, and receive Access Denied when trying so.
Can anyone please shed some light on this? This has become a serious issue on a live site.
https://www.dropbox.com/s/ogwu9slw3023ye3/Screenshot%202016-02-26%2013.2...
thanks.
Comment #12
nelslynn CreditAttribution: nelslynn commentedReopening
Edit closing, got working for User 1, still issues with other users however.
Comment #13
nelslynn CreditAttribution: nelslynn commented