http://technicka.net/tech/private-files-and-file-security-drupal

http://drupal.org/project/private_upload *

Ryan LeTulle,* Web Developer

personal: bayousoft.com http://www.bayousoft.com twitter: @bayousoft http://twitter.com/bayousoft

http://twitter.com/bayousoft

http://twitter.com/bayousoft*"Be the change you want to see in the world." * Mahatma Gandhi

On Mon, Feb 28, 2011 at 5:56 PM, Joel Willers joel.willers@sigler.comwrote:

To be clear:

The content type works fine.

The field works fine (sorta).

It’s the file itself. If someone were to link the URL to the file, it ignores all permissions.

*From:* support-bounces@drupal.org [mailto:support-bounces@drupal.org] *On Behalf Of *Joel Willers *Sent:* Monday, February 28, 2011 5:52 PM *To:* support@drupal.org *Subject:* [support] File permissions

I have a content type, Admin role can edit/view. Authenticated users can only view. The content type has a file field.

1.  I absolutely need only Authenticated to be able to view it.
   
   

2.  I would really like all Admin to view it, but ONLY A SPECIFIC USER
   

if they are only Authenticated.

Currently the Anonymous users can see the file, even if the field is marked in Content Permissions as not viewable.

Help!

Joel

-- [ Drupal support list | http://lists.drupal.org/ ]