Fixing permission for download (refs #22)

plone · May 27, 2015 · 7fc3196 · 7fc3196
1 parent 90afffc
commit 7fc3196
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/plone/app/blob/field.py b/src/plone/app/blob/field.py
@@ -293,7 +293,7 @@ def fixAutoId(self, instance):
                 # a file name was given, so the instance needs to be renamed...
                 instance.setId(filename)
 
-    @security.private
+    @security.protected(View)
     def download(self, instance, REQUEST=None, RESPONSE=None):
         """ download the file (use default index_html) """
         return self.index_html(