pagefileSecure

[patrick]

I'm running a website, where only logged-in members should have access to downloads (site/assets/files).

This was working well in ProcessWire 3.0.165 with the following settings in config.php:

$config->pagefileSecure = true;
$config->pagefileSecurePathPrefix = '-';

and in the template settings I also removed the "view" permission for "guest".

Since updating ProcessWire to 3.0.184 (and 3.0.200) logged-in members have no more access to those downloads, they get a 404 page.

I also tested the following settings, which didn't make any difference:

What exactly changed since 3.0.184 regarding pagefileSecure and what is the best approach to get back to the previous state (downloads for logged-in members only)?

[patrick]

After some tests, I found out that the above problem only occurs in fields of type "RepeaterMatrix".

After the following steps, the problem now seams solved:

• go to "Setup > Templates"
• under "Filters": activate "show system templates"
• edit the repeater template file and ...
• under Tab "Access": activate view permission for the frontend user and deactivate view permission for guest