The title says it all i.e. we need the same privileges as the old forum to download the files with the need of the author to authorize them OR authorization should be checked by default and author can disable/uncheck the option if he/she wants.