Widget does not respect Allowed URI Schemes

Investigating

There is an overlap with #1201924 Marking this a a duplicate and closing.

I think this issues is not related to #1201924: Widget does not respect settings in file_field_instance_settings_form (uri scheme, directory, extensions, file size).

The media field setting "Allowed URI schemes" (allowed_schemes) is totally ignored. I think it's never been implemented.

The patch in comment #30 from related issue:

     '#media_options' => array(
       'global' => array(
         'types' => array_filter($instance['widget']['settings']['allowed_types']),
-        // @todo: Not implemented
         'schemes' => $instance['widget']['settings']['allowed_schemes'],
+        'file_directory' => $instance['settings']['file_directory'],
+        'file_extensions' => $instance['settings']['file_extensions'],
+        'max_filesize' => $instance['settings']['max_filesize'],
+        'uri_scheme' => $field['settings']['uri_scheme'],
       ),
     ),

But the schemes global option is never used in the code.

I'm facing the same issue described by @smartinm in #3.

If you select only the private uri scheme, images uploaded by media browser are always stored in the public folder. This happens with Media version 7.x-2.0-unstable6+70-dev

This issue is related with #1201924: Widget does not respect settings in file_field_instance_settings_form (uri scheme, directory, extensions, file size) but the patch proposed in comment #30 on that issue does not match with the current code in branch 7-x-2.x

same issue here. though the file field is configured to be private, the uri scheme in the database shows public://

Marked #1994278: Take into account the allowed_types and allowed_schemes of the media module field widget as a duplicate.

A patch to ensure that the upload destination scheme is one of the allowed schemes.

For the related File entity issue, see #2217841: Scheme selection form provides options not allowed by the field settings.

Committed #7 to 7.x-2.x.