i am fix the issue by permision user group..
but all attach file .zip also available for download and view..
have any idea to separate the Image and attach file (exclude image file)
for image i give the permission to guest view but for File (exclude image file) i want my visitor register