Viewing 1 replies (of 1 total)
  • Plugin Author Shamim Hasan

    (@shamim51)

    When user A send a message to User B, he already give permission to access that file.

    File can be accessed by anyone who has permission to access the associated message. So until user B has access that message he can access that file as that file is part of that message.

    It is intended behavior and is not a security matter. But for GDPR, it is better to contact a lawyer who may have better understanding about it.

    Wordpress has built-in delete request handler, so if any user ask for that, that time the settings in Privacy tab will be enforced.

Viewing 1 replies (of 1 total)
  • The topic ‘Access to attached files – Attachments’ is closed to new replies.