Today I published a post on my Discourse site in the staff category as an administrator. There was an image in this post. The URL for this image is publicly accessible. Is this normal? Thank you.

I think so. Otherwise, there would be no need for the secure-uploads feature: [image] Secure Uploads megaphoneAnnouncements Added in the Discourse 2.4 release in February is the Secure Uploads feature, which provides a higher degree of security for ALL uploads …

Are the images published in the Staff category publicly visible?

Support

patrickemin (Patrick EMIN) November 28, 2025, 5:52pm 3

Thanks I didn’t know that functionality

Topic		Replies	Views
How the media in the posts look like when secure uploads are enabled? Support secure-uploads	6	288	February 28, 2023
Secure Media Uploads breaks Category Logos Bug	4	1162	August 25, 2020
Secure Uploads Announcements secure-uploads	46	16711	July 24, 2025
S3 Bucket objects restricted access policy as per Discourses groups Support	2	840	October 1, 2021
Personal Message attachments accessible to unauthenticated users (missing auth check) Support secure-uploads , personal-messages	1	50	July 8, 2025

Are the images published in the Staff category publicly visible?

Related topics