#846296 by Berdir, ridgerunner, agentrickard: Fixed file_file_download() only implements access checks for nodes and users.

1 files changed, 9 insertions, 0 deletions

diff --git a/modules/user/user.module b/modules/user/user.module
index e85ceff35..c4b02f91c 100644
--- a/modules/user/user.module
+++ b/modules/user/user.module
@@ -3684,3 +3684,12 @@ function user_rdf_mapping() {
     ),
   );
 }
+
+/**
+ * Implements hook_file_download_access().
+ */
+function user_file_download_access($field, $entity_type, $entity) {
+  if ($entity_type == 'user') {
+    return user_view_access($entity);
+  }
+}