diff options
| -rw-r--r-- | modules/file/file.module | 12 |
1 files changed, 8 insertions, 4 deletions
diff --git a/modules/file/file.module b/modules/file/file.module index 4fc998501..9fcdfe071 100644 --- a/modules/file/file.module +++ b/modules/file/file.module @@ -142,10 +142,14 @@ function file_file_download($uri, $field_type = 'file') { // Find out which (if any) fields of this type contain the file. $references = file_get_file_references($file, NULL, FIELD_LOAD_CURRENT, $field_type); - // If there are no references, stop processing, to avoid returning headers - // for files controlled by other modules. - if (empty($references)) { - return; + // Stop processing if there are no references in order to avoid returning + // headers for files controlled by other modules. Make an exception for + // temporary files where the host entity has not yet been saved (for example, + // an image preview on a node/add form) in which case, allow download by the + // file's owner. + + if(empty($references) && ($file->status == FILE_STATUS_PERMANENT || $file->uid != $user->uid)) { + return; } // Default to allow access. |