Sorry, this was just a browser cache problem :(
The images and attachments do follow the page access rights.
--
Brian
-----Original Message-----
From: brian.roth(a)gov.bc.ca [mailto:brian.roth@gov.bc.ca]
Sent: Wed, June 20, 2007 6:10 PM
To: xwiki-users(a)objectweb.org
Subject: [xwiki-users] Attachment Security?
It appears that attachments are viewable and downloadable
even when page that they are associated with is not viewable
due to page access rights.
Is this the expected behavior? Is there a way to set
attachment access rights?
Thanks,
Brian