# Need log the who downloaded attachments

**URL:** https://meta.discourse.org/t/need-log-the-who-downloaded-attachments/65454
**Category:** Feature
**Created:** [July 2, 2017, 5:58am UTC](https://meta.discourse.org/t/need-log-the-who-downloaded-attachments/65454 "2017-07-02T05:58:05Z")
**Posts on this page:** 1
**Showing post:** 7

<div class="post-metadata">

### Author: ![tophee](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tophee/32/73406_2.png) [@tophee](https://meta.discourse.org/u/tophee)
#### Post date: [July 3, 2017, 5:28am UTC](https://meta.discourse.org/t/need-log-the-who-downloaded-attachments/65454/7 "2017-07-03T05:28:59Z")

</div>

Note that attachments can be downloaded by anyone who has the link.

> [@File attachments in restricted categories should be restricted](https://meta.discourse.org/t/file-attachments-in-restricted-categories-should-be-restricted/60765):
>
> Currently, files that are uploaded to a restricted category are accessible to anyone, even users who are not logged in. Chances are that these files get indexed by search engines and thus become public. I agree with @tobiaseigen that this is quite a serious issue: But I am not sure what exactly the current state of affairs is regarding this, except that, some time ago, @dmitry_fedyuk created the [restrict files plugin](https://meta.discourse.org/t/restrict-files-plugin-sell-a-digital-content-on-your-discourse-forum-version-1-2-1-2015-07-19/29775) whose [latest version seems to be 2.1](https://discourse.pro/t/topic/33) which is [confirmed to be compatible with…](https://discourse.pro/t/topic/33/6)

---

_[View the full topic](https://meta.discourse.org/t/need-log-the-who-downloaded-attachments/65454)._