[wp-trac] [WordPress Trac] #59866: Attachment pages are only disabled for users that are logged in

[WordPress Trac]

#59866: Attachment pages are only disabled for users that are logged in
-------------------------------------+---------------------
 Reporter:  joppuyo                  |       Owner:  (none)
     Type:  defect (bug)             |      Status:  new
 Priority:  normal                   |   Milestone:  6.4.2
Component:  Media                    |     Version:  6.4
 Severity:  normal                   |  Resolution:
 Keywords:  has-patch needs-testing  |     Focuses:
-------------------------------------+---------------------

Comment (by afercia):

 @joppuyo thanks for testing.

 To my understanding, your reproduction steps try to access the attachment
 page url directly? I'm not sure that's a case that has been covered by the
 current implementation neither I'm sure whether it should be covered. I'm
 not saying it should not, just that I'm not sure as it appears there is
 some historical inconsistency in the way WordPress handles attachments for
 public / private / password protected posts.

 The goal of #57913 was to prevent attachment pages from being indexed by
 search engine crawlers. Is there any way crawlers can access the
 attachment pages by using directly the attachment page url? I'd think a
 crawler would first crawl the parent post, and then follow the links to
 the attachment pages. Unless I'm missing something.

 I would recommend to please test the patch following the steps in
 comment:2. That would help clarify the nature of the issue and better
 understand what is best to do next.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/59866#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform