Sorry, this was just a browser cache problem :( The images and attachments do follow the page access rights. -- Brian

-----Original Message----- From: [email protected] [mailto:[email protected]] Sent: Wed, June 20, 2007 6:10 PM To: [email protected] Subject: [xwiki-users] Attachment Security?

It appears that attachments are viewable and downloadable even when page that they are associated with is not viewable due to page access rights.

Is this the expected behavior? Is there a way to set attachment access rights?

Thanks,

Brian