Anonymous user's can't views/download files uploaded via file field I have a node with a File field and i am using public file system. I have uploaded a file via File field and checked the mark "display" in the list of attached files to node, but still, anonymous user's can't even view it (also they can't download it), till i check this permission:



But i think it's security vulnerability. Is drupal 7 file access system broken? Or am i missing something?

Manage display page
Figured out! I have uploaded a .rar file, so drupal wouldn't recognize this as existed file types e.g. audio, image, document. I had to go in admin/structure/file-types/manage/document

And add mimetypes for .rar and .zip extension:

application/rar
application/zip


Then just reuploaded file and gave anonymous user's permission:

Document: Download any files