Leaving all files with access "public", when restricting access via categories?

[phunsoft]

This is about an environment where only administrators in the backend prepare files for donwload by registered users of the site.

"Access" (not "Access rights") is a setting for categories and files.

I understand that "Access" for top level categories is always checked first. Only users in specified (Joomla) group will potentially have access to subcategories or files under that category. Each level of subcategory will be checked for correct group, in order, before file level "Access" is even checked. Finally, file level "Access" is checked for correct group.

Is this correct?

If so, file level "Access" may be left wit default group "Public" with no risk. If any of the categories down the path to the file denies access, there is no way to download the file. Not even by the unique download link.

Still correct?

[Jan]

Hi, the access is set for category, without dependency to parent category or subcategory. When you set some access rights for category, this is valid only for files in this category. The difference between category and access is just the option to have some variability. E.g. if you want that files in category can be public and not public, this is not possible with category access rights, only with file access rights.

Jan

[phunsoft]

Hi, the access is set for category, without dependency to parent category or subcategory.

But you can only see a subcategory when you also have the right to see the parent category. In that sense, there is a depenency, right?

When you set some access rights for category, this is valid only for files in this category.

I got this.

The difference between category and access is just the option to have some variability. E.g. if you want that files in category can be public and not public, this is not possible with category access rights, only with file access rights.

I don't need different access for different files in same category, so I'm save leaving all file access to "public".
Thanks