First, this set of plugins is exactly what I'm looking for. Kudos to the author.
I am currently using:
- Social Access Control 1.1
- Private Files for Social Privacy 1.1
Initial setup for this issue is to create a post with a gallery in a "hidden" category. Everything behaves correctly for a logged in user (as best I can tell at the moment).
The issue is that if an anonymous user attempts to access one of the gallery images directly (on an "attachments page"), the page is shown instead of a 404 (or 403) error. For example, if the post URL is:
http://example/2008/11/hidden-post
and one of the gallery images is at:
http://example/2008/11/hidden-post/n809150121_4263422_67481/
An anonymous user will see the above page if they try to access it. The attached images will not display (due to Private Files for Social Privacy plugin) but they will still be able to comment and see navigate through the gallery.
Please let me know if more information is required.
Jeff