MyBB Community Forums

Full Version: Attachments issue
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
I guys, I have a problem with attachments is my forum.
The problem is that guests can download attachments.
I checked forums and users permissions and they don't have permissions for download attachments.
Can you help me?

[attachment=35751]

No one can help me?

I solved the problem adding in attachment.php file before download the attachment this code:

if($mybb->usergroup["candlattachments"] == 0) {
 error_no_permission();
}
Looks like a bug, moving to bug reports.
Can anybody confirm this?
Just replicated this and seems fine to me?
I don't know how you tried to replicate this, but the group check is clearly missing from the attachments.php file. Only forum perms are checked.
(2016-01-26, 10:21 PM)Destroy666 Wrote: [ -> ]I don't know how you tried to replicate this, but the group check is clearly missing from the attachments.php file. Only forum perms are checked.

I meant as in guests are unable to download attachments on my board?
EDIT: nvm, you were right, I had something broken in my installation when I tested (OP probably too) and the forum permission function should take care of it - unpushing and marking as invalid, unless someone knows what could be wrong in the installation. Definitely not what OP mentioned, maybe something connected with the cache or permission inheritance.