On a client's website I've denied the access to uploaded files for anonymous users. Nevertheless, the anonymous user can still see the attached files by clicking the rss-feed icon at the start page of the site.

Why?

Comments

hayesr’s picture

You also need to set files to be private under admin > settings > file-system

creazion_dev’s picture

Thanks for your help erichayes, but an anonymous user can still see the attachment in the rss feed (tested with IE7).
Only the path of the file has changed from:

files/

to:

system/files/

---------------------------------------------
last projects: www.happyfaces-kinderschminken.de - www.3p-consulting.com

hayesr’s picture

Not sure, then. Sorry.