HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.

Is there a way to block user downloads unless signed in?


I'm really happy with the system so far. The one obstacle I've run into is that users can browse posts and download the attachments without registering or logging in.

Is there a way to block user permissions for downloading attachments until/unless they are logged in?

Or, as a plan B, is it possible to hide posts in a section entirely until/unless the user is logged in?

Thank you for any advice!


  • KasparKaspar Moderator

    Plan B.

    Remove view rights for the category for the Guest role.

    You can also control that logged in role Z can see category X while logged in role Y cannot.

    Or can see but not post in

    Via dashboard under Role permission


    Category permissions

  • Thank you. I set it up that way which works pretty good.

    Though, if there was a way to show the posts but have downloads of attachments off for guests it would be ideal...

Sign In or Register to comment.