Attachment previews bypass permission

Attachments to XFRM resources bypass the "Can View Resource Images" permission and show a preview of attachments that users shouldn't have the ability to view in any form.

Читать далее...