{"action":"opened","issue":{"url":"https://api.github.com/repos/frappe/frappe/issues/1646","repository_url":"https://api.github.com/repos/frappe/frappe","labels_url":"https://api.github.com/repos/frappe/frappe/issues/1646/labels{/name}","comments_url":"https://api.github.com/repos/frappe/frappe/issues/1646/comments","events_url":"https://api.github.com/repos/frappe/frappe/issues/1646/events","html_url":"https://github.com/frappe/frappe/issues/1646","id":143172191,"number":1646,"title":"Bug with private files in Slideshow","user":{"login":"alex-melkoff","id":2329767,"avatar_url":"https://avatars.githubusercontent.com/u/2329767?v=3","gravatar_id":"","url":"https://api.github.com/users/alex-melkoff","html_url":"https://github.com/alex-melkoff","followers_url":"https://api.github.com/users/alex-melkoff/followers","following_url":"https://api.github.com/users/alex-melkoff/following{/other_user}","gists_url":"https://api.github.com/users/alex-melkoff/gists{/gist_id}","starred_url":"https://api.github.com/users/alex-melkoff/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alex-melkoff/subscriptions","organizations_url":"https://api.github.com/users/alex-melkoff/orgs","repos_url":"https://api.github.com/users/alex-melkoff/repos","events_url":"https://api.github.com/users/alex-melkoff/events{/privacy}","received_events_url":"https://api.github.com/users/alex-melkoff/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-03-24T07:26:01Z","updated_at":"2016-03-24T07:26:01Z","closed_at":null,"body":"It is possible to add private files for slideshow from file selection dialog\r\n![screenshot_20160324_151554](https://cloud.githubusercontent.com/assets/2329767/14010808/78a3c076-f1d3-11e5-9ed9-3bd7e5d7c007.png)\r\n\r\nThis causes issues with slideshow on main page as files won't be accessible for unauthorized users:\r\n![screenshot_20160324_150723](https://cloud.githubusercontent.com/assets/2329767/14010827/c1fcd7e4-f1d3-11e5-9caa-265ed55493ee.png)\r\n_left - authorized user, right - user that did not sign in yet_\r\n\r\nIt's clearly a permission issue according to output from development web server:\r\n`07:03:24 web.1                | Traceback (innermost last):\r\n\r\n07:03:24 web.1                |   File \"/vagrant/bench/apps/frappe/frappe/app.py\", line 66, in application\r\n\r\n07:03:24 web.1                |     response = frappe.utils.response.download_private_file(request.path)\r\n\r\n07:03:24 web.1                |   File \"/vagrant/bench/apps/frappe/frappe/utils/response.py\", line 127, in download_private_file\r\n\r\n07:03:24 web.1                |     raise Forbidden(_(\"You don't have permission to access this file\"))\r\n\r\n07:03:24 web.1                |  Forbidden: 403: Forbidden`"}}