# File attachments in restricted categories should be restricted

**URL:** <https://meta.discourse.org/t/file-attachments-in-restricted-categories-should-be-restricted/60765>\
**Category:** Feature\
**Created:** [11 Abril, 2017 10:25 UTC](https://meta.discourse.org/t/file-attachments-in-restricted-categories-should-be-restricted/60765 "2017-04-11T10:25:06Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [11 Abril, 2017 13:08 UTC](https://meta.discourse.org/t/file-attachments-in-restricted-categories-should-be-restricted/60765/2 "2017-04-11T13:08:03Z")

</div>

This is something I want core to support out of the box, but it would require a fair bit of internal change.

That said, I don’t think the current state of affairs is terrible, the actual links to the assets contain “secure random” strings, they are not guessable.

Sure, if someone with access shares a link to it then someone unauthorized can download.

But…

What if someone with access downloads the paper and then forwards it via email?

---

_[View the full topic](https://meta.discourse.org/t/file-attachments-in-restricted-categories-should-be-restricted/60765)._