Hello g00r00!

I just noticed that although a user does not have access to download (or even
tag) a file -- as per File Base Settings --> DL Unvalidated or DL Failed,
he/she can still view an archive and then (D)ownload files from within the
archive.

Perhaps the (D)ownload option of the archive viewer -- both the to-be
built-in one and the "external" one for other archive formats -- shouldn't
allow downloads if the DL Unvalidated (for unvalidated files) or DL Failed
(for failed files) restriction isn't satisfied?

Best regards
Bj”rn

--- Mystic BBS v1.12 A47 2021/08/07 (Linux/64)