I am running 4.0.7 and I have a question about guest permission. When a registered user drags a photo to the area that says "drag files here to attach, or choose files", that is an attachment, correct?

I have it set so it makes the image a 100 pixel thumbnail. My guest permissions are set so that guests cannot download attachments, but they are able to view the thumbnail, and if they click on the thumbnail then they can view the full sized image. Am I missing a setting somewhere that prevents them from either being able to view the thumbnail or the full sized images?

Same for me on 4.0.13

have you found a solution yet?