TID: Mystic BBS 1.12 A47   
   MSGID: 2:201/137 8054b779   
   TZUTC: 0200   
   Hello g00r00!   
      
   I just noticed that although a user does not have access to download (or even   
   tag) a file -- as per File Base Settings --> DL Unvalidated or DL Failed,   
   he/she can still view an archive and then (D)ownload files from within the   
   archive.   
      
   Perhaps the (D)ownload option of the archive viewer -- both the to-be   
   built-in one and the "external" one for other archive formats -- shouldn't   
   allow downloads if the DL Unvalidated (for unvalidated files) or DL Failed   
   (for failed files) restriction isn't satisfied?   
      
   Best regards   
   Bj”rn   
   --- Mystic BBS v1.12 A47 2021/08/07 (Linux/64)   
    * Origin: Star Collision BBS, Uppsala, Sweden (2:201/137)   
   SEEN-BY: 1/123 30/0 80/1 90/1 103/705 105/81 120/340 123/131 124/5016   
   SEEN-BY: 129/305 154/10 201/0 137 203/0 124 218/700 221/0 1 6 226/30   
   SEEN-BY: 227/114 702 229/101 424 426 428 452 550 700 981 1016 1017   
   SEEN-BY: 230/0 240/1120 5832 249/206 307 317 400 261/38 280/464 5003   
   SEEN-BY: 282/464 1038 292/854 8125 301/0 1 101 113 317/3 320/219 322/757   
   SEEN-BY: 335/364 341/66 342/200 396/45 633/280 712/848 920/1 2452/250   
   SEEN-BY: 3634/24 5020/1042 5058/104   
   PATH: 201/137 0 203/0 280/464 301/1 229/426