Under 7.13, the accessibility of files attached to forum topics or forum comments correctly obeys the accessibility of the forum topic node, at least when controlled by the Forum Access module.

So far I've traced this back to file_get_file_references(), which returns the following under 7.13:

screenshot

Under 7.14, file_get_file_references() returns nothing (because the query returns nothing), ultimately resulting in a 403 for the file for everyone but user 1.

Support from Acquia helps fund testing for Drupal Acquia logo

Comments

Berdir’s picture

Could this be related to the messed up node access query pointed out in #1571104: Can't access non-node entities with EntityFieldQuery ?

salvis’s picture

Status: Active » Closed (duplicate)