Change record status: 
Project: 
Introduced in branch: 
7.x
Introduced in version: 
7.92
Description: 

Image and file fields displayed on the taxonomy term detail page using the private filesystem are now accessible to all users with the access content permission.

Missing implementation of the hook_file_download_access() was causing that these files were not accessible until now and they always returned HTTP error 403 (access denied).

A new taxonomy_file_download_access() hook implementation was added to allow access to these files, explicitely granting access to all users with the access content permission. If you have implemented hook_file_download_access() with more precise access control to workaround this bug, you will need to update your hook to hook_file_download_access_alter(), because the taxonomy_file_download_access() will override all denials returned by other hook_file_download_access() hooks (see: https://api.drupal.org/api/drupal/modules%21file%21file.api.php/function/hook_file_download_access/7.x).

Return value
TRUE is access should be allowed by this entity or FALSE if denied. Note that denial may be overridden by another entity controller, making this grant permissive rather than restrictive.

If your site is relying on the existing functionality (access denied) then you will need to introduce additional access control for these file fields using either one of the contrib modules or by custom module using the hook_file_download_access_alter().

Impacts: 
Site builders, administrators, editors
Module developers
Themers
Site templates, recipes and distribution developers