Access to private files is not regulated

Created on 10 September 2025, about 1 month ago

Problem/Motivation

When private files are translated, users reviewing the translation are not allowed to view the translated file, nor will the node be succesfully associated with the translated node.

Steps to reproduce

  • Set up a node type with a file type that saves files in the private file system
  • Create a node and associate a translatable file with it
  • Submit the node including the file for translation
  • Inspect the translation, open the translated file

Notice how opening the file is disallowed.

Proposed resolution

Add hook_file_download() and hook_file_access() implementations to check if a file is associated with any open and recently accepted job items.

Remaining tasks

Create merge request
Review
Merge

User interface changes

None.

API changes

None.

Data model changes

None.

🐛 Bug report
Status

Active

Version

1.0

Component

Core

Created by

🇳🇱Netherlands eelkeblok Netherlands 🇳🇱

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024