Security issue : everyone can download post

Hello,

I am trying your plugin with custom post.

I see that, if i have the post ID, i can download every post of my website, even if the the public access of the post if forbidden :

example :

Link : https://localhost/office/cabinert-admin-2?action=genpdf&id=84

office is a custom post.

Public access is to FALSE

I think that your plugin has to forbidden the access if the custom post cannot be see for everybody.

What do you think ?

And other suggestion : Can you provide hook juste before the download pdf ?

Because with this hook, we can manage security : only authorize download for the author for example.