Different file dumping on different mime types? about fal_securedownload HOT 6 CLOSED

How do the links generated by the rte look like?

from fal_securedownload.

Version of TYPO3 is 7.6.18

BE

<ul>
  <li>
    <a href="http://localhost/typo3/web/?file:331">image</a>
  </li>
  <li>
    <a href="http://localhost/typo3/web/?file:306">pdf</a>
  </li>
</ul>

FE

<ul>
  <li>
    <a href="/typo3/web/index.php?eID=dumpFile&amp;t=f&amp;f=331&amp;token=c6ad01f92c00fc5e70d1288b44032113db4ec599" target="_blank">image</a>
  </li>
  <li>
    <a href="/typo3/web/index.php?eID=dumpFile&amp;t=f&amp;f=306&amp;token=3f29f6d609c63f0acf30263c353c2eb99b70b38d" target="_blank">pdf</a>
  </li>
</ul>

from fal_securedownload.

And you are sure file 306 is restricted? as the url looks ok.

from fal_securedownload.

Ok, I think I found it out.
It has nothing to do with the mime type (would have been quite funny)

Steps to reproduce accessible files though set group restriction:

1. upload a new file or select one without previously set group access
2. call webpage that's including this file (I guess it will generate the dumpFile-URL)
3. restrict access by assigning a group
4. as an unauthorized user it should display "Authentication required!". But it don't!

So when the file is not requested by an unauthorized user the very first time then all following requests are going to granting access.

Seems to me, that an already generated dumpFile-URL maybe is not reevaluate the current restrictions (and is cached anyway?).

from fal_securedownload.

can you try to access such a link in a different browser or with all browser cache cleared?

from fal_securedownload.

Hmm? -.- Yeah ok...
+1 for the browser cache hint ;)

Thank you!

from fal_securedownload.