I am testing this and I found an issue with the permissions.
I have one category. The category is set to use permissions from a forum. I have added one download to the category.
The permissions on the forum that is used allow no access to anybody accept admins.
On the front page local_links.php clicking on the link under "most popular..." results in a permission denied page. Thats good.
However clicking on the links what's new or what's hot displays the attachment and download is possible even for anonymous users.
...
Ok, just found out that I can prevent that by also setting a forum to control permission on the attachment itself.
So my question is this instead: Shouldn't the attachment permission as default follow the category in which it is posted? And setting a different forum on the attachment should then overide the category permission?
|