>By the way I am on version 1.5.9.
Please consider to upgrade, we are on 1.6.4 already. 1.5.9 is three years old and I mean to remember there might have been bugs with this ;-)
The user is loggedin so can still download. You can use the object of the current admin `$_zp_current_admin_obj` to get the name of the user and limit it to specific users.
Alternatively use `zp_loggedin(ADMIN_RIGHTS)`. Replace ADMIN_RIGHTS with the rights level constant you want. See https://www.zenphoto.org/news/user-rights/ for more info.
Note that all docs reflect the current release version ;-)