--- filefield.module 2009-07-10 05:50:11.000000000 -0400 +++ filefield-fixed.module 2009-07-13 16:12:44.000000000 -0400 @@ -180,7 +180,8 @@ function filefield_file_download($file) if (isset($nodes[$content['nid']])) { continue; // Don't check the same node twice. } - if ($denied == FALSE && $node = node_load($content['nid']) && node_access('view', $node)) { + $node = node_load($content['nid']); + if ($denied == FALSE && node_access('view', $node) == FALSE) { // You don't have permission to view the node this file is attached to. $denied = TRUE; }