[Boofo]

Originally Posted by CarCdr

Does this hack support permissions

Boofoo, permissions for accessing attachments and posts is handled. Perrmission handling for generating the listing will likely be in version 2. vBulletin does not offer any modularized way of handling permissions, so it's rather a pain in the a**.

As you no doubt are aware, this would require checking each attachment against the associated forum table, via the thread table, then for each listing entry, a call has to be made to "fetch_permissions".

Permissions in play are CANVIEW, CANGETATTACHMENT, and possibly can_moderate. If CANVIEW is off, then we would not list the post title.

Finally, there would be processing for forum passwords. I do not know how that would work nicely, as you could be interrogated multiple times for a single page.

The only tables we touch currently are attachment, user, and post. I discussed this in the initial post as I anticipated it would be a concern.

Now, if one tries to download an attachment or look at a post, or view a user's profile (in other words, follow any of the links on a listing, then the normal vBulletin permissions apply since these are standard vBulletin URLs.

does it show private attachments if you have the PM attachment hack installed?

No. I am not familiar with this hack. Is it used widely?

The pm attachments hack for vB3 is very widely used and an excellent hack. Kentaurus coded it.