Issue with downloading embedded attachments

[Alexander Yuganov]

A video attachment is automatically inserted into a post this way:

<video class="ipsEmbeddedVideo" controls="" data-controller="core.global.core.embeddedvideo" data-fileid="42566">
	<source src="https://domain/uploads/monthly_2022_09/filename.mov.586766f886744b354395822ed8ddf4d8.mov" type="video/quicktime"> <a class="ipsAttachLink" href="//domain/applications/core/interface/file/attachment.php?id=42566&amp;key=671c655c246018173227d863060e2069">filename.mov</a>
</video>

It works well when the video format is supported on a client - then it shows the embedded video. However, in case of a mov video file it's not supported on many Windows devices. In this case the embeded video is not displayed and there is an attachment link instead. However, when user clicks on that link it shows the error "This attachment is not available. It may have been removed or the person who shared it may not have permission to share it to this location."

Note: the attachment was uploaded by admin, and the link does work if clicked from another admin account - it doesn't work only when clicked from a user (non-admin) account.

The board version is v4.7.2.1.

Edited October 10, 2022 by Alexander Yuganov

[Nathan Explosion]

Do those clicking the link have permissions to 'Download attachments'?

The behaviour you see is because anyone is allowed to view the video, because it's a direct link to the .mov file and no check is done on permissions there. But the fallback to the attachment.php file does do a permissions check.

Been that way since 4.3 was released:

 

 

[Alexander Yuganov]

Nathan, thanks! It was indeed the missing download permissions on that forum.

Issue resolved.