I'm sure you didn't understand what I am trying to convey to you clearly. This IS a major flaw.
Here is why:
1. The plugin allows for you to see the download stats. That includes the # of downloads, the last date & the LINK to the actual download.
2. It's fine that the ADMIN can see the info. That's the whole point, having a dashboard. HOWEVER,
3. As a SUBSCRIBER, who signs up to your website, who may & should have access to their profile information, they ALSO, have access to the same STATS -- INSIDE THEIR PROFILE PANEL (same as the ADMIN)
So, for example, if a "SUBSCRIBER", comes to your site & sees a 1 download they want, they can get it. If they log into their profile & want to change information, they also get to see the ENTIRE LIST OF DOWNLOADS, how many was downloaded, etc.
So, if the Admin wanted to protect the OTHER downloads from subscribers who shouldn't have ACCESS, you can't do it. Because,
SUBSCRIBERS, EDITORS, AUTHORS, CONTRIBUTORS -- PEOPLE WHO ARE NOT AT "ADMIN LEVEL" can access the same data by logging into your site, & access the same data.
So, in effect, your plugin would not work for those who run a membership site, where registered members can see EVERY download, when they weren't granted access to "every" download -- simply by going through their personal backend to view their profile.
I personally would've liked to use this plugin, as the concept does work. However, I have had to remove it because of this issue.
Test what I'm saying for yourself, ADD a "NEW USER" to your site, as a SUBSCRIBER (NOT ADMIN), or Author, Contributor, etc. The log in as them, and see the UNRESTRICTED ACCESS given as that user role as a subscriber.
I would recommend you take a look at it, unless, this was the real "intended behavior" of this plugin.