I'm trying to set up private files on Drupal 7 using Organic Groups. So far, I have
(1) one group type that although I appear to have set it up as such
(2) have private files set up in as below. (The webroot is /var/www/html.)
(3) Ensured the link on the OG's page is /system/files/test.example.doc
,
(4) I inspected the database entry and this appears to be good.
MariaDB [s7data]> select * from file_managed \G
*************************** XXX. row ***************************
fid: 357
uid: 103
filename: test.pwww_.doc
uri: private://test.pwww_.doc
filemime: application/msword
filesize: 9
status: 1
timestamp: 1460390385
uuid: 3a9877fc-77b2-47bc-8d4f-e8bc349f4c74
I am still able, using this link path do download that doc in a new browser without being logged in. In effect, this file is not private and does not require an authenticated session to download.
Question: Did I miss something? How does one set up private files correctly on Drupal 7?