This hotfix also removes video display for 'upload' fields. This is because v9 added a 'video' field of its own, so the functionality no longer made sense.

Note that there will be no additional security for custom fields on content types nor on CPFs. This patch only can add security for regular catalogue entries.


A much more complex patch has been put in for v10, due to the need for this to work with the new multi upload fields coming in v10. That was trickier due to no longer being a simple 1-to-1 correspondence with fields and files, in relation to a particular entry -- while continuing needing to enforce security and defining appropriate exceptions and maintaining framework abstraction.