It appears that attachments are viewable and downloadable even when page that they are associated with is not viewable due to page access rights. Is this the expected behavior? Is there a way to set attachment access rights? Thanks, Brian