I am using the private file system of drupal 7.14 and nodeaccesss. When assigning a password the node is shown to the user accessing it but an attached image is not shown. Of course this is the idea behind using the private file system but would it be possible to integrate a functionality to permit a password authenticated user access to the attached file?

Comments

vlad.pavlovic’s picture

Issue summary: View changes
Status: Active » Closed (works as designed)

No, unfortunately, this is the logical way for Nodeaccess to work. If a file is private and the user doesn't have access to the node in question, they should not have access to any attachments that belong to the node. Sorry.

mirko@le-dot.com’s picture

hi

we installed the module, and it does exactly what it said. that's the good part.

now we have the same issue regarding file access. the node includes a file field, which then gives the link to the file, placed in private folder outside root.
when going to the frontend, the node access works like it should, just the file can be still accessed trough a direct link.

as i unpublish the node, the file is not accessible anymore (so i guess the private file folder works properly). it seems to me that the file acess is not precessed trough the module.

i've found a solution for a earlier version (https://www.drupal.org/node/278791) but don't know really how to implement it. it seems like an additional module is needed?

fluxline’s picture

i don't think the original post was answered, and I have the same question but i'll put it another way.
- a node is created that has a file attached that is stored in the private file system, with nodeaccess settings correctly enabled (assumed)
- the author of the node grants access to another user giving them view access.
- the user with the new grant to view the node cannot view the attached document.

would it be possible to set that if a user is granted view access that they can also see attached documents in the private file system?

thx for any help

fluxline’s picture

Status: Closed (works as designed) » Active
fluxline’s picture

my bad, in testing i'd also tried the field permissions module and on the field made it visible only to admin and author. all is at should be.

fluxline’s picture

Status: Active » Closed (works as designed)