Fixed Attached videos are viewable / playable by guests

[Fethi.dz]

Affected version

2.1 Alpha

Usually attached pictures are not able to be viewed by guests and they are allowed only to view the thumbnails (based on the permission givien for the guests group which by default set no for viewing attachments) but for the attached videos they are viewable / playable for guests.
Is this a bug or there is an option to allow videos to be viewed / played by guests!

 

[Mike]

So there was a bug here which I have fixed that would display the attachment unexpectedly. I should note that it is necessary for video files to be served from a "real" file though for them to be played back efficiently, so that roughly means that if someone can view a video attachment then they can give someone else the URL to it and they can view it. At that point, they could just save it and share it anyway. (This behavior is also the same with thumbnails.)