Thanks for that. OK, so if the files are in the same directory as the .htaccess file, ordinary download links don’t work. If they are in a subdirectory, they will download fine, whether assigned to a user group or not. Using File Away’s Manager table, I can rename, move, delete, and copy files in the same directory as the .htaccess file as well as other directories, with no problems. I can create, rename, and delete directories within the .htaccessed directory, no problems. But an ordinary download link doesn’t work (nothing to do with HTTPS).
However, if I enable encryption, the files will download fine (because we’re going straight to the server to ask for them). Also, if I enable statistics (a feature you don’t have yet, it’s in development), they download fine for the same reason (we go straight to the server for them). I’ll keep poking around to see if I can find another solution, but in the meantime, encrypting file download links will solve your problem.