Despite the configuration above the file “Attendant development-1.pdf” is available to both users.
I would expect that with such a configuration the file “Attendant development-1.pdf” would ONLY be accessible to the user “development-1”.
What am I missing?
Files can be accessible by a user if the file has a category that is accessible by the user’s role. And user can also access the file if they are given access to the file using the username from package settings. Maybe that’s why your file is accessible by both users.
Anyway, if you want me to take a closer look, please send temporary wp-admin login info as a private reply.
You are providing package access through the allowed roles option in category settings. For example, user developement-2 is getting access to the Attendant: development-1 pdf pacakge of its category Attendant. The Attendant category provides access to the Albion Academy: Attendant role. Both developement-2 and developement-1 have this role.