--- filefield.module 2009-07-03 13:53:07.000000000 -0700 +++ filefield-fixed.module 2009-08-17 19:29:03.000000000 -0700 @@ -180,7 +180,7 @@ function filefield_file_download($file) if (isset($nodes[$content['nid']])) { continue; // Don't check the same node twice. } - if ($denied == FALSE && $node = node_load($content['nid']) && node_access('view', $node)) { + if ($denied == FALSE && ($node = node_load($content['nid'])) && !node_access('view', $node)) { // You don't have permission to view the node this file is attached to. $denied = TRUE; }