Permission ignored for view_inline
Permalink
When I use the Add File button when editing a Content Block, and then immediately inspect the link URL with the TinyMCE Insert/Edit Link tool, I see the the following:
Once I use the Update button to close the editor, the URL gets changed to
However, if I edit the original URL before updating the block to read then the URL is not converted when I update the block.
Some explanation of why this is would be appreciated, but that is not the main reason for this post.
I have a file in a Set with permissions for Guest set to prevent access. I added both forms of the link to this file on a page viewable by all, forgetting that access was limited. Of course, both worked fine for me when logged in. For Guests using the {CCM:FID_DL_1006} link, the result was the "Download File" page with a "Invalid file" message. For Guests using the /mysite/index.php/download_file/view_inline/1006/ link, the file displayed normally!
The issue of download vs. view inline has been discussed (http://www.concrete5.org/community/forums/usage/prevent_link_to_file_from_downloading_open_instead/ ) for two years now, but is still not cleanly addressed by Concrete5, and certainly not well understood by me...
/mysite/index.php/download_file/view/1006/
Once I use the Update button to close the editor, the URL gets changed to
{CCM:FID_DL_1006}
However, if I edit the original URL before updating the block to read
/mysite/index.php/download_file/view_inline/1006/
Some explanation of why this is would be appreciated, but that is not the main reason for this post.
I have a file in a Set with permissions for Guest set to prevent access. I added both forms of the link to this file on a page viewable by all, forgetting that access was limited. Of course, both worked fine for me when logged in. For Guests using the {CCM:FID_DL_1006} link, the result was the "Download File" page with a "Invalid file" message. For Guests using the /mysite/index.php/download_file/view_inline/1006/ link, the file displayed normally!
The issue of download vs. view inline has been discussed (http://www.concrete5.org/community/forums/usage/prevent_link_to_file_from_downloading_open_instead/ ) for two years now, but is still not cleanly addressed by Concrete5, and certainly not well understood by me...
