In the group and forum permissions management, you can set whether or not to view attachments, and another option to allow or disallow downloads, but it doesn't work because I allow the visitor group to view but not download.So for me, it's a bug, but no big deal, I'll figure it out. Thanks.