Files in masked records: access rights should be limited to those of its record

[mmo]

When a record is masked (either masked_for_all or masked_for_external_ips), the access rights of the files attached to the record should be at least as strict.

Ideally, this should not modify the access property of the files, as the record's masked property should be allowed to change independently of the files' access rights.

Summary of the rules for file access, depending on it's containing record's masked statuts:

• record is not_masked:
  • employ the normal access property of the file
• record is masked_for_all:
  • forbid access to the file
• record is masked_for_external_ips:
  • allow access to the file only within the allowed IP address ranges