Hi,

I am using a document type and this document type pages are secured by using properties->security section and in this document type we have a file up-loader field for pdf or doc files. By using this document type page authenticated user can view its related document type page and he/she can download its attached pdf or doc file by using attachment file URL like this

https://localhost/getattachment/cfc99fea-d804-4d22-8759-da62cc281e8f/August-2011.aspx

Now this user is logout from our kentico CMS site and then he/she can use this URL on browser's address bar and it will allow to any user to download this attachment file weather he/she public user can't view document type page.

How to secure its attachment files by accessing public users????