Issue

Server Setup Information

• Did you test in newest Wekan?: yes
• Did you configure root-url correctly so Wekan cards open correctly (see https://github.com/wekan/wekan/wiki/Settings)? yes
• Operating System: Windows 10
• Deployment Method (Snap/Docker/Sandstorm/bundle/source): Windows 64bit Version On-Premise
• Http frontend if any (Caddy, Nginx, Apache, see config examples from Wekan GitHub wiki first):
• Node.js Version: 14.21.3
• MongoDB Version: 6.0.5
• What webbrowser version are you using (Wekan should work on all modern browsers that support Javascript)? Google Chrome 115.0.5790.171

Problem description

After uploading an attachment to a card, I can't access the attachment. I always get an "access denied" error. I have tried PNG, XLSX and PDF files. I also upgraded to the latest version of Wekan (V. 7.04) and NodeJS (V. 14.21.4), but the error still occurs. I have now downgraded to version 6.80.

Reproduction Steps

1. Upload a picture or file to a card
2. Try to click on it or download it
3. I get the error "access denied"

Logs

Wekan.log