I have a node with a File field and i am using public file system. I have uploaded a file via File field and checked the mark "display" in the list of attached files to node, but still, anonymous user's can't even view it (also they can't download it), till i check this permission:
But i think it's security vulnerability. Is drupal 7 file access system broken? Or am i missing something?
Manage display page