Version 7.x-1.x provided "two useful features which Drupal itself is missing: a simple permission to allow downloading of private files by role, plus the ability to combine both public and private downloads". Version 7.x-2.x removed the "global" permission and implemented a per-directory by-user and by-role filter instead, to let the administrator better tweak the whole website and increment the overall security. The 8.x port was rewritten from scratch, but many thanks to Paris Liakos and Andrey Kovtun for their precious help and hints.

Problem/Motivation Access to media files in the private file space is governed solely by 'view media' permission and publishing status. This means private assets are still visible, even if access to the node that relates to these media is forbidden. Proposed resolution